Kyriakos Economou, co-founder of security firm ZeroPeril Patches available via Windows UpdateĮconomou said they successfully tested attacks on AMD Ryzen 2000- and 3000-series CPUs before reporting the issue to the vendor earlier this year in April. For example, these can be used to steal credentials of a user with administrative privilege and/or be used in pass-the-hash style attacks to gain further access inside a network. The contents of those physical pages varied from kernel objects and arbitrary pool addresses that can be used to circumvent exploitation mitigations such as KASLR, and even registry key mappings of \Registry\Machine\SAM containing NTLM hashes of user authentication credentials that can be used in subsequent attack stages. “During our tests we managed to leak several gigabytes of uninitialized physical pages,” the ZerPeril co-founder said.
Latest amd apu drivers driver#
In order to interact with PSP enclaves, the Windows OS uses a kernel driver named amdsps.sys.īut in a report published on Wednesday, Economou said he found two issues in this driver that allows a non-admin user to dump the system memory and search for sensitive information handled by the OS. Tracked as CVE-2021-26333 and discovered by Kyriakos Economou, co-founder of security firm ZeroPeril, the vulnerability resides in the driver for AMD Platform Security Processor (PSP), which is AMD’s equivalent for Intel’s SGX technology.Īlso known as a trusted execution environment (TEE), the AMD PSP creates secure enclaves inside AMD processors that allow the operating system to process sensitive information inside cryptographically secured memory.
Latest amd apu drivers drivers#
AMD CPU driver bug can break KASLR, expose passwordsĪMD has advised Windows users this week to update their operating systems in order to receive a patch for a dangerous vulnerability in one of its CPU chipset drivers that can be exploited to dump system memory and steal sensitive information from AMD-powered computers.
0 kommentar(er)
