AMD confirms its chips are vulnerable to Spectre, is rolling out fixes

midian182

Posts: 9,726   +121
Staff member

With all the press related to the Spectre and Meltdown CPU flaws right now, Intel must be feeling the pressure. The same can’t be said for AMD, which, due to the architecture of its processors, stresses that there is “a near zero risk” to the company’s chips. However, it is still impacted by two of the exploits. A statement put out by the firm on Thursday states that both of the Spectre design flaws are “applicable to AMD processors.”

Back when the flaws were first discovered, there was confusion over whether they affected AMD’s processors. The company even said that "AMD is not susceptible to all three variants," in a statement last week, but it seems it is susceptible to two of them.

A blog post from Mark Papermaster, AMD’s chief technology officer, gives an update on what AMD is doing to address the situation.

For Variant 1 (Bounds Check Bypass or Spectre), AMD is currently working with Microsoft to patch both old and new processors. Distribution of patches for older CPUs was paused after they bricked some systems, but fixed versions of these updates should resume by next week.

Variation 2 (Branch Target Injection or Spectre), which is harder to exploit, is being addressed through optional microcode updates for Ryzen and EPYC processors starting this week. Older CPUs will receive them over the coming weeks. They will be provided by system providers and OS vendors.

AMD didn't reveal if, like Intel's chips, the patches will have an effect on system performance.

Responding to questions about its GPUs, AMD says Radeon architectures do not use speculative execution and therefore are not susceptible to the threats. The company said it will release further updates on its progress "as needed."

Permalink to story.

 
Confusion? The original AMD statement said AMD architecture was susceptible to Spectre (03/01/2018) but not meltdown.
I think your quote is deliberately taken out of context to make it look like AMD said they were not susceptible to any of the attack vectors rather than what they were actually saying (not susceptible to all three of the attack vectors).
 
Confusion? The original AMD statement said AMD architecture was susceptible to Spectre (03/01/2018) but not meltdown.
I think your quote is deliberately taken out of context to make it look like AMD said they were not susceptible to any of the attack vectors rather than what they were actually saying (not susceptible to all three of the attack vectors).

They also said that the updates that were rolling out had been bricking some older AMD systems. The affected systems ended up in a boot loop, not bricked.

Its Techspot: they do their best to trash AMD in any way they can.
 
Microsoft January 3, 2018—KB4056892)
"Microsoft has reports of some customers with AMD devices getting into an unbootable state after installing this KB. To prevent this issue, Microsoft will temporarily pause Windows OS updates to devices with impacted AMD processors at this time."
 
Confusion? The original AMD statement said AMD architecture was susceptible to Spectre (03/01/2018) but not meltdown.
I think your quote is deliberately taken out of context to make it look like AMD said they were not susceptible to any of the attack vectors rather than what they were actually saying (not susceptible to all three of the attack vectors).

They also said that the updates that were rolling out had been bricking some older AMD systems. The affected systems ended up in a boot loop, not bricked.

Its Techspot: they do their best to trash AMD in any way they can.

Are we talking about the site that has continually praised the Ryzen architecture for at least a year now??
 
I "assume" from this comment: "Older CPUs will receive them over the coming weeks. They will be provided by system providers and OS vendors," that those of us that have built PCs have to look for a fix from Microsoft, Linux, etc. vendors?
 
The company even said that "AMD is not susceptible to all three variants," in a statement last week.

Could you find that statement for us? Cause that is where the confusion comes from.
 
The company even said that "AMD is not susceptible to all three variants," in a statement last week.

Could you find that statement for us? Cause that is where the confusion comes from.

AMD's official statement, from http://www.amd.com/en/corporate/speculative-execution

mi97jtG.png
 
Back