Oh btw, AMD EPYC vulnerabilities, some high risk

jsg

AMD EPYC systems, all 3 generations, have 22 vulnerabilities, some of which are graded as high risk.

Bad news part 2: AMD took almost 2 years to develop and offer a patch (BIOS) for some of the above (Translation: they didn't care).

The good news: Albeit very late, now there are BIOS patches available and it seems the big server players offer downloads for (some? all? of) their servers.

More details: CVE-2020-12954, CVE-2020-12961, CVE-2021-26331, CVE-2021-26335,
CVE-2021-26315, CVE-2020-12946, CVE-2020-12951, CVE-2021-26336, CVE-2021-26337,
CVE-2021-26338, CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325, CVE-2021-26326,
CVE-2021-26322, CVE-2021-26327, CVE-2021-26312

AMD link: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

pike

So, how much performance do we loose if we apply these patches?

jsg

@pike said:
So, how much performance do we loose if we apply these patches?

Me not know yet, but I guess very little to none, because the vulnerabilities seem to be in the sakkurity sub-system.