6 ms·
Relevant snippet: This technique is CVE-2023-20593 and it works on all Zen 2 class processors, which includes at least the following products: AMD Ryzen 3
by lopkeny12ko 3y ago
Relevant snippet:
This technique is CVE-2023-20593 and it works on all Zen 2 class processors, which includes at least the following products:
AMD Ryzen 3000 Series Processors
AMD Ryzen PRO 3000 Series Processors
AMD Ryzen Threadripper 3000 Series Processors
AMD Ryzen 4000 Series Processors with Radeon Graphics
AMD Ryzen PRO 4000 Series Processors
AMD Ryzen 5000 Series Processors with Radeon Graphics
AMD Ryzen 7020 Series Processors with Radeon Graphics
AMD EPYC “Rome” Processors
- kevin_thibedeau 3y agoFYI, Ryzen 3000 APUs aren't Zen 2.
- neogodless 3y ago> AMD Ryzen 3000 Series Processors The above are desktop. If they meant APUs, it would list "Ryzen 3000 Series Processors with Radeon Graphics."
- timw4mail 3y agoThey are Zen+, aren't they?
- tremon 3y agoDo they mean "only confirmed on Zen2", or is the problem definitely confined to only this architecture? Is it likely that this same technique (or similar) also works on earlier (Zen/Zen+) or later (Zen3) cores, but they just haven't been able to demonstrate it yet?
- paulmd 3y agoIt's Tavis Ormandy, and he reported it to AMD, so one would assume they tried it on related hardware and it's not working.
- rincebrain 3y agoAt least the stock exploit code he provided said "nope I can't get shit to leak" on my 5900X.
- Arnavion 3y agoDoesn't repro on 2920x (Zen+).
- zacmps 3y agoI tested on a Zen 3 Epyc and wasn't able to get the POC to work, so I think it probably is just Zen 2.
- justinclift 3y agoWhew, my 5600X looks like it avoided this one too. :)
- ye-olde-sysrq 3y agoSo are Ryzen 5000's without Radeon not vulnerable? I guess said processors are zen 3? I have an "AMD Ryzen 9 5950x Desktop Processor" which appears to be Zen 3. I think I'm good? (Not that I'm running untrusted workloads, but yknow, fortune favors the prepared)
- Tuna-Fish 3y agoYou are likely frequently running untrusted workloads. As javascript in a browser. I don't know about this one, but at least meltdown was fully exploitable from js. But yes, you are fine, 5950x is Zen3.
- CameronNemo 3y agoI was under the impression that 5600g and 5600u were Zen3, but being the APU models they have Radeon graphics. Anecdotally, I tried to reproduce on my 5600g but couldn't. Which is surprising because they claim it works on 5700u... Edit: just discovered that while my 5600g is Zen3, the 5700u is Zen2. Lol.
- anarazel 3y agoI wish Firefox would use PR_SCHED_CORE to reduce the likelihood of such leakage...
- rockdoe 3y agoThe idea being that the main process and content processes should never be on the same core? I would worry about cross site leakage. From my understanding that would be unavoidable as soon as you have more tabs open than cores, which feels like an unworkable restriction. Imagine opening a 9th tab and bring told you need to upgrade your 3700X to a 3900X.
- anarazel 3y agoI think there's several levels. As a first step, I'd appreciate reducing the risk of javascript extracting contents from outside the browser. A second step could be to use more granular core scheduling within firefox, to prevent sharing cores that shouldn't be shared. A process/thread hierarchy can create multiple core scheduling groups.
- eugene3306 3y agoand how about playstation 5 ? and also xbox and that thing from valve?
- javajosh 3y agoI mean, the PS5 is running a Zen 2 processor [0] so I would assume it's vulnerable. In general I would assume that AAA games are safe. Websites and smaller games made by malefactors will be the issue. (Note that AAA game makers have little interest in antagonizing the audience, OTOH they also will push limits to install anti-cheat mechanisms. On balance I'd trust them.) 0 - https://blog.playstation.com/2020/03/18/unveiling-new-details-of-playstation-5-hardware-technical-specs/ https://blog.playstation.com/2020/03/18/unveiling-new-detail...
- darkwater 3y agoI think the interesting point here might be one could be able to extract some secret from memory of a PS5, like to break some kind of encryption
- FirmwareBurner 3y agoWhat valuable secrets do people have on their PS5/Xbox? You also need a way to deploy the malicious payload on those platforms which, due to their closed nature, is very difficult to do.
- AdmiralAsshat 3y agoAt least with the PS3, I seem to recall that I couldn't extract any of my games' save data from the hard-drive of my PS3 unit that went dead due to RROD (or was it YLOD?) because the hard-drive was encrypted using the PS3's serial key as part of the encryption. I don't know if that mechanism persists into the PS4/PS5.
- javajosh 3y agoOh, I can imagine lots of uses for a bevy of PS5's, assuming you can gain remote control. What do you do with a botnet? What do you do with a botnet with a pretty good GPU? What do you do with an always-on microphone in people's living rooms?
- winrid 3y agoLooks like my 2700x narrowly misses this one, assuming 7020 series is affected and not 7000 series.