It allows attackers to steal protected information such as encryption keys and user login information from the processor without physical access to the computer or server.
The vulnerability affects the entire Zen 2 product line, including AMD EPYC data center processors and Ryzen 3000/4000/5000 processors.
AMD has already released patches for the EPYC 7002 “Roman” processors, but patches for the Zen 2 Ryzen 3000, 4000 and some 5000 series consumer processors are only expected in November and December 2023.
The processors used in PS5, Xbox Series X and S and Steam Deck are also powered by Zen 2 chips, but it is not yet clear whether they will be affected.
The Zenbleed vulnerability was filed as CVE-2023-20593 and allows data theft at 30KB per core per second, providing enough bandwidth to steal sensitive information passing through the processor.
Source: Ferra
I am a professional journalist and content creator with extensive experience writing for news websites. I currently work as an author at Gadget Onus, where I specialize in covering hot news topics. My written pieces have been published on some of the biggest media outlets around the world, including The Guardian and BBC News.
