Zenbleeed: AMD Zen 2 vulnerability

[Mr Evil]

https://lock.cmpxchg8b.com/zenbleed.html (or via archive.org, since the site was overloaded earlier).

Yet another speculative execution bug leading to information leaking between threads. Looks pretty serious, but it's already patched, so you just need to make sure your OS and/or BIOS is up to date.

 

[Mr Evil]

I don't suppoose anyone knows if there is an update for Windows with a mitigation or CPU microcode update? I can see Linux has both mitigation in the kernel and new microcode, BSD has mitigation, but no mention of Windows anywhere. BIOS updates are not as convenient (if available at all).

Read both threads, but enjoyed this the best.

You win.

Thanks! I put entire minutes into making my posts the most entertaining on the 'net.

 

[Mr Evil]

Unpatchable AMD Chip Flaw Unlocks Paid Tesla Feature Upgrades

Sorry Elon, but this appears to be unpatchable.

www.tomshardware.com

Not the same vulnerability. That's a glitch attack, which isn't something ordinary users need to care about, unless your threat model is attackers able to solder wires to your motherboard.

 

[Mr Evil]

18% ouch

What's source of that info ?

I assumed he was just trying to be funny; there's no way you could distill the performance impact down to a single number. I've not seen any reliable benchmarks before/after the fixed microcode, so I can't provide a better answer myself.