AMD released a new chipset driver in August that patched “critical security flaws,” but it didn’t mention which vulnerabilities the patch worked for. In a report published last week, cybersecurity researchers disclosed a vulnerability in the driver that would allow attackers to steal sensitive information like passwords, and it impacts all Ryzen processors, as well as several previous AMD generations.

　　The vulnerability (CVE-2021-26333) exists in AMD’s Platform Security Processor (PSP) chipset driver. The PSP works with the operating system to store sensitive information in secured parts of memory, and it’s usually only accessible by administrators.

　　Image used with permission by copyright holderKyriakos Economou, co-founder of security research firm ZeroPeril, published a report last week that said non-privileged users could exploit the driver to access the sensitive information stored in memory, according to The Record. Originally, AMD listed the vulnerability as only affecting Ryzen 1000 processors. The report says that all desktop and mobile Ryzen processors are affected, and AMD has updated its security disclosure since.

　　Recommended Videos

　　The attack focuses in the motherboard chipset, so it doesn’t apply if you have an AMD graphics card without an AMD processor (though another security flaw is posing a risk to AMD cards at the moment).

　　Related

　　AMD’s new Ryzen 8040 CPUs aren’t all that new Gigabyte may have just leaked AMD next big release Update your Apple devices now to fix these dangerous exploits

　　According to the report, Economou was able to leak “several gigabytes” of data. The exploit also allows attackers to get around mitigations like kernel address space layout randomization (KASLR), which protect against attacks that exploit a known address for the kernel. With these exploits, attackers can steal sensitive information like passwords and gain deeper permissions in a network.

　　Although scary, AMD has already patched the vulnerability with a new PSP chipset driver, which rolled out last week through Microsoft’s September Patch Tuesday. Read on learn how to update your drivers to make sure you have the latest version.

How to protect yourself

　　Image used with permission by copyright holderThen select Check for Updates and install any that are available. After that’s done, make sure to restart your computer to apply the new patches. Alternatively, you can download AMD’s auto-detect tool to install the latest Ryzen chipset drivers to your system. If you go this route, make sure to know your motherboard’s chipset and be certain that AMD PSP Driver is checked during the chipset driver installation.

　　If you arrive at Windows Update and don’t see anything, you can check to see if you have the latest chipset driver installed. Press Windows Key + X and select Device Manager. Expand the Security Devices list, right-click on AMD PSP, and select Properties. In the window that opens, select the Driver tab to view your driver version.

　　The secure version is 5.17.0.0, so you’ll need to update if your driver version is different. Although the vulnerability is mainly focused on recent Ryzen processors, it actually affects many generations of AMD CPUs. Here’s the full list:

　　2nd Gen AMD Ryzen Mobile Processor with Radeon Graphics2nd Gen AMD Ryzen Threadripper processor3rd Gen AMD Ryzen Threadripper Processors6th Generation AMD A series CPU with Radeon Graphics6th Generation AMD A-Series Mobile Processor6th Generation AMD FX APU with Radeon R7 Graphics7th Generation AMD A-Series APUs7th Generation AMD A-Series Mobile Processor7th Generation AMD E-Series Mobile ProcessorAMD A4-Series APU with Radeon GraphicsAMD A6 APU with Radeon R5 GraphicsAMD A8 APU with Radeon R6 GraphicsAMD A10 APU with Radeon R6 GraphicsAMD 3000 Series Mobile Processors with Radeon GraphicsAMD Athlon 3000 Series Mobile Processors with Radeon GraphicsAMD Athlon Mobile Processors with Radeon GraphicsAMD Athlon X4 ProcessorAMD Athlon 3000 Series Mobile Processors with Radeon GraphicsAMD Athlon X4 ProcessorAMD E1-Series APU with Radeon GraphicsAMD Ryzen 1000 series ProcessorAMD Ryzen 2000 series Desktop ProcessorAMD Ryzen 2000 series Mobile ProcessorAMD Ryzen 3000 Series Desktop ProcessorAMD Ryzen 3000 series Mobile Processor with Radeon GraphicsAMD Ryzen 3000 series Mobile ProcessorAMD Ryzen 4000 Series Desktop Processor with Radeon GraphicsAMD Ryzen 5000 Series Desktop ProcessorAMD Ryzen 5000 Series Desktop Processor with Radeon GraphicsAMD Ryzen 5000 Series Mobile Processors with Radeon GraphicsAMD Ryzen Threadripper PRO ProcessorAMD Ryzen Threadripper Processor