[molyss]

I'm not sure if the linked pages was updated recently, if I'm completely misreading it or if you're trolling. There's only one processor family (matisse) that's documented as "no fix planned). All datacenter products already have a fix published, and all non-matisse chips will have a new firmware available by october 2024

[Vegenoid]

The Ryzen 3000 series ("matisse") is less than 5 years old, with the models coming out in late 2019 and 2020. To not issue a fix for those is very disappointing.

I just built a gaming PC with a Ryzen 3600. It is more than sufficient to run modern games with demanding graphics and performance. I now need to learn about this exploit. Yes, if someone gets the level of access required to exploit it I was pwned anyway, but now if I get pwned I need to open up my computer and throw away a perfectly powerful CPU, then put it back together with a new one.

That's pretty damn frustrating. It will definitely push me away from AMD when I am making future hardware decision.

EDIT: As pointed out by sqeaky and others, there shouldn't be a method for persistence that lives on the processor, instead it would likely be on the motherboard, or in the bootloader on a storage device.

[outworlder]

We need more details before claiming that the sky is falling. Many exploits that are theoretically possible have so many pre-requisites in practice that they don't matter. We need to see if that's the case here.

Intel CPUs have been self-destructing, so you need to throw away CPUs even if they aren't pwned. They have also had far more security vulnerabilities than AMD, some of them cannot be patched, and operating systems had to work around them. Heck, the Sinkclose name came from 'Sinkhole', which was an Intel vulnerability.

No manufacturer is perfect.

[gruez]

>but now if I get pwned I need to open up my computer and throw away a perfectly powerful CPU, then put it back together with a new one.

I don't think there's any indication that the exploit allows the CPU itself to be persistently infected.

[kmeisthax]

If you get code execution in SMM you can flash the BIOS on the motherboard. You'd be junking the mobo (unless it has one of those "BIOS Flashback" setups), not the CPU.