Slashdot: AMD Warns of New Meltdown, Spectre-like Bugs Affecting CPUs

Jul 9, 2025

—

Source URL: https://it.slashdot.org/story/25/07/09/1835230/amd-warns-of-new-meltdown-spectre-like-bugs-affecting-cpus
Source: Slashdot
Title: AMD Warns of New Meltdown, Spectre-like Bugs Affecting CPUs

Feedly Summary:

AI Summary and Description: Yes

Summary: AMD has identified a newly discovered side-channel attack, known as the Transient Scheduler Attack (TSA), which poses a potential information disclosure risk across a variety of its chip models. Although the vulnerabilities were initially rated as medium and low severity, they have been assessed as “critical” by security firms due to the complexity of executing these exploits.

Detailed Description: The Transient Scheduler Attack (TSA) comprises four distinct vulnerabilities found in AMD processors, similar to previously known vulnerabilities like Meltdown and Spectre. The core aspects of this attack and its implications for security professionals are noteworthy:

– **Vulnerabilities Identified**:
– Four vulnerabilities have been discovered within AMD’s architecture during an investigation initiated by information from Microsoft regarding microarchitectural leaks.
– The vulnerabilities are categorized into medium and low severity. Despite this, they have garnered critical attention from cybersecurity firms.

– **Complexity of Exploit**:
– Though rated lower in impact, executing a successful attack requires the attacker to have the ability to run arbitrary code on the target machine, highlighting the complexity and prerequisites involved.

– **Affected Chip Models**:
– The vulnerabilities impact a wide range of AMD processors, including desktop, mobile, and datacenter models, particularly the 3rd generation and 4th generation EPYC chips.

– **Security Concerns and Expert Assessment**:
– Security firms like Trend Micro and CrowdStrike have rated the threat as “critical.” This reflects a consensus in the cybersecurity community that even vulnerabilities rated as “low” or “medium” can present significant risks under certain conditions.

Key Implications for Security Professionals:
– **Awareness of Emerging Threats**: It’s crucial for security professionals to remain vigilant about new vulnerabilities as they arise, particularly those affecting widely used hardware.
– **Risk Management**: Organizations using AMD hardware may need to assess their risk exposure and implement mitigation strategies, considering the nature of the vulnerabilities.
– **Incident Response Preparedness**: The nature of the TSA attack underscores the importance of having robust incident response plans in place, especially for systems involving critical data handling.

This incident serves as a reminder of the evolving landscape of threats in hardware security and the continuous need for vigilance in cybersecurity practices.

1 2 3 3rd 4 5 7 a Act AI alt AMD AMD processors and Arch architectural architecture art as assessment at ated attack aware awareness Bi Bug bugs by C CERN channel attack chip chips CI CIA co code community complexity concerns Condi consensus continuous core CPU CPUs critical cross crowd CrowdStrike cyber cybersecurit Cybersecurity cybersecurity community cybersecurity firms cybersecurity practices D data Data Handling datacenter de Desktop disclosure DoT e E 3 emerging emerging threats end Epyc exp expert exploit exploits for g Gen generation Go gs H handling hardware hardware security high Highlight HR http HTTPS implications implications for security in incident incident response incident response plan incident response plans information information disclosure investigation io ite k Key known vulnerabilities l Lance land led Li low M mac machine man management meltdown Micro Microsoft Mila mitigation mitigation strategies Mobile Mode model models N new no o of on organization organizations ory oS out over potential practices pre preparedness pro process processor processors professionals ps Py Q R rate RCE red response Response Plan Risk risk exposure risk management risks Ro row s sec security security community security concerns security firm security practices security professionals severity side side-channel attack Sig Sim source Spectre SSE SSO STIG strategies system systems T ted the threat threats to Tor TP Transient Scheduler Attack Trend Micro TSA UI under US use V vigilance vulnerabilities Ware Wi x z