AMD Secure Processor (Ryzen / Ryzen Pro): The same class of Secure Processor access-control failure as RYZENFALL-1

Impact

The same class of Secure Processor access-control failure as RYZENFALL-1, covering three further variants. An administrator-level attacker writes into ASP-protected memory and gains execution in the secure coprocessor, defeating the hardware root of trust the rest of the platform is anchored to.

Who can reach it

Local, administrator-privileged. Requires the attacker to already control the OS on the node.

What to do

Fixed in AMD reference firmware (AGESA / SEV firmware) and delivered to you only as an OEM SBIOS/BIOS package - Dell, HPE, Supermicro, Lenovo, Gigabyte and the ODMs each rebuild and requalify AMD's AGESA drop before it ships. **Expect months, not weeks**: AMD publishes the bulletin, the OEM ships BIOS somewhere between one and six months later, and for platforms past their support window it may never arrive at all. Applying it is a full node power cycle with the host drained - not a driver reload, not a live patch. Track it as a firmware campaign per server SKU, not per kernel version, and verify afterwards by reading back the SMU/PSP firmware version rather than trusting the BIOS revision string. Client-silicon focused; confirm applicability to your EPYC server SKUs before scheduling.

References

Related entries

• Promontory chipset firmware (AMD Ryzen / Ryzen Pro platforms): A backdoor in the Promontory chipset firmware. TheCVE-2018-8934 · Promontory chipset firmware (AMD Ryzen / Ryzen Pro platforms)Critical
• AMD EPYC / Ryzen - Platform Security Processor privilege escalation: A direct privilege escalation into the PlatformCVE-2018-8936 · AMD EPYC / Ryzen - Platform Security Processor privilege escalationCritical
• APC Smart-UPS SmartConnect family (SMT, SMC, SMTL, SCL, SMX series) - cloud-connected UPS firmware: A heap overflow inCVE-2022-22805 · APC Smart-UPS SmartConnect family (SMT, SMC, SMTL, SCL, SMX series) - cloud-connected UPS firmwareCritical
• APC Smart-UPS SmartConnect family (SMT, SMC, SMTL, SCL, SMX series) - TLS state machine: A TLS authentication bypass byCVE-2022-22806 · APC Smart-UPS SmartConnect family (SMT, SMC, SMTL, SCL, SMX series) - TLS state machineCritical
• Dell Enterprise SONiC (authentication): A critical step in authentication is missing, so an unauthenticated remoteCVE-2024-45764 · Dell Enterprise SONiC (authentication)Critical
• Arista EOS OSPFv3: crafted packet restarts the routing agentCVE-2026-73455 · Arista EOS (OSPFv3 routing agent)High