Users of laptops and desktop computers powered by AMD’s Ryzen processors are encouraged to update drivers as soon as possible.
The reason is that there are system security holes or malicious bugs in AMD Ryzen processors that allow hackers to steal sensitive user information, such as passwords, from computer memory.
This is revealed in a recent report by Kyriakos Economou, co-founder of security research firm ZeroPeril.
In its report, Economou mentions that this dangerous bug affects all Ryzen processors in both laptops and desktop PCs, as well as several AMD processors from the previous generation.
AMD itself is aware of this dangerous bug and has released a new driver update last August. However, at that time it was still not explained what kind of security holes were fixed.
Compiled from the official AMD website, the bug that has the code CVE-2021-26333 has been patched through the AMD Platform Security Processor (PSP) driver update version 5.17.0.0. This update is part of the AMD Chipset Driver 3.08.17.735.
Computer users with Ryzen processors are also advised to immediately install related driver updates so that they are not affected by this vulnerability. This driver update is available via Windows Update.
In its report, Economou explained that the bug coded CVE-2021-26333 was attacking AMD’s Platform Security Processor (PSP) chipset driver.
The PSP itself is known to work with the operating system to store sensitive information in secure parts of memory, such as parts of memory that only administrators can access.
However, with the CVE-2021-26333 bug, other users who don’t actually have access can exploit the driver to access sensitive information stored in memory.
According to the same report, this bug also allows attackers to exploit kernel address space layout randomization (KASLR). With this exploit, attackers can steal sensitive information such as passwords and gain wider permissions on the network.
AMD Processors Affected List
On its official website, AMD details a list of 32 processor series affected by the security vulnerability coded CVE-2021-26333, as follows.
- 2nd Gen AMD Ryzen Mobile Processor with Radeon Graphics
- 2nd Gen AMD Ryzen Threadripper processor
- 3rd Gen AMD Ryzen™ Threadripper™ Processors
- 6th Generation AMD A series CPU with Radeon™ Graphics
- 6th Generation AMD A-Series Mobile Processor
- 6th Generation AMD FX APU with Radeon™ R7 Graphics
- 7th Generation AMD A-Series APUs
- 7th Generation AMD A-Series Mobile Processor
- 7th Generation AMD E-Series Mobile Processor
- AMD A4-Series APU with Radeon Graphics
- AMD A6 APU with Radeon R5 Graphics
- AMD A8 APU with Radeon R6 Graphics
- AMD A10 APU with Radeon R6 Graphics
- AMD 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Athlon 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Athlon Mobile Processors with Radeon™ Graphics
- AMD Athlon X4 Processor
- AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- AMD Athlon™ X4 Processor
- AMD E1-Series APU with Radeon Graphics
- AMD Ryzen™ 1000 series Processors
- AMD Ryzen™ 2000 series Desktop Processors
- AMD Ryzen™ 2000 series Mobile Processor
- AMD Ryzen™ 3000 Series Desktop Processors
- AMD Ryzen™ 3000 series Mobile Processor with Radeon™ Graphics
- AMD Ryzen™ 3000 series Mobile Processor
- AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Desktop Processors
- AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics
- AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD Ryzen™ Threadripper™ PRO Processor
- AMD Ryzen™ Threadripper™ Processor
How To Update AMD Ryzen Drivers To The Latest Version
As compiled by KompasTekno from DigitalTrends, Tuesday (21/9/2021), this security vulnerability has an impact on the computer motherboard chipset, so it does not affect users who only have AMD Radeon graphics cards without Ryzen CPUs.
If you have a laptop or desktop PC with an AMD processor listed above, then the user is required to update the driver. Before that, users can check their driver version with these steps :
- Press Windows key + X
- Select “Device Manager” > expand “Security Devices” > right click on “AMD PSP” > then select the “Driver” tab.
There, the user can see the version of his driver. The safe and latest version of AMD PSP driver is 5.17.0.0, which is part of AMD Chipset Driver 3.08.17.735.
If the driver version turns out to be older, the user must update it as soon as possible.
Currently, a patch for the bug coded CVE-2021-26333 is available in Windows update. To install it, users only need to do the following steps.
- Press Windows key + S, then type “Update”
- Select “Check for updates”
- The user will be redirected to the Windows Update page
- Then, select “Check for updates”
- Install any available updates.
- Once done, make sure to restart your computer.