Intel and AMD Patch More Than 80 Vulnerabilities Across Their Products
Summary
Intel and AMD announced patches for more than 80 vulnerabilities. Intel addressed 72 flaws across its products, while AMD issued advisories covering 12 vulnerabilities, including issues that could enable privilege escalation, denial of service, or code execution.
Key points
- Intel published 42 advisories covering 72 vulnerabilities.
- Intel fixed high-severity flaws affecting products including PROSet/Wireless WiFi software, Xeon processors, TDX, and Active Management Technology.
- Intel said the vulnerabilities could enable privilege escalation, denial of service, local code execution, or information disclosure.
- AMD published five advisories covering 12 vulnerabilities.
- AMD's high-severity Vitis development environment flaws could lead to private key disclosure, privilege escalation, or arbitrary code execution.
- AMD also addressed arbitrary code execution issues in Ryzen Master Utility, SEV-SNP, and Power Design Manager.
Article Details
- Event Type
- Intel and AMD security patch announcements addressing more than 80 vulnerabilities across their products.
- Impact
- Intel reported fixing 72 vulnerabilities across 42 advisories, including high-severity issues that could enable privilege escalation, denial of service, information disclosure, or local code execution. AMD reported about a dozen vulnerabilities across five advisories; issues included potential private key disclosure, privilege escalation, and arbitrary code execution.
Vendors
Products
Active Management TechnologyTrusted Module for Xeon processors (privilege escalation), TDX (privilege escalation), Active Management Technology (DoS), PROSet/Wireless WiFi software (local code execution, privilege escalation and DoS), andAMD SEV-SNPArbitrary code execution issues have also been addressed by AMD in Ryzen Master Utility, SEV-SNP, and Power Design Manager.CSMETechnology (DoS), PROSet/Wireless WiFi software (local code execution, privilege escalation and DoS), and CSME and SPS (privilege escalation).Data Center Attestation Primitivesvulnerabilities have been addressed in Xeon processors (privilege escalation), Data Center Attestation Primitives (information disclosure), Alias Checking Trusted Module for Xeon processors (privilegeIntel TDX(information disclosure), Alias Checking Trusted Module for Xeon processors (privilege escalation), TDX (privilege escalation), Active Management Technology (DoS), PROSet/Wireless WiFi software (local codePower Design ManagerArbitrary code execution issues have also been addressed by AMD in Ryzen Master Utility, SEV-SNP, and Power Design Manager.PROSet/Wireless WiFi softwareThe company patched several high-severity flaws in PROSet/Wireless WiFi software that could allow an attacker to escalate privileges or conduct a denial-of-service (DoS) attack.Ryzen Master UtilityArbitrary code execution issues have also been addressed by AMD in Ryzen Master Utility, SEV-SNP, and Power Design Manager.SPS(DoS), PROSet/Wireless WiFi software (local code execution, privilege escalation and DoS), and CSME and SPS (privilege escalation).Vitis development environmentOne advisory describes five high-severity issues in the Vitis development environment.XeonIn addition, high-severity vulnerabilities have been addressed in Xeon processors (privilege escalation), Data Center Attestation Primitives (information disclosure), Alias Checking Trusted Module for Xeon processors