AMD announced that Windows users should immediately update their operating systems because a dangerous vulnerability was discovered in one of the CPU drivers.
The vulnerability could be exploited to dump system memory and steal sensitive information from computers using AMD chips.
The CVE-2021-26333 vulnerability was discovered by Kyriakos Economou, co-founder of security firm ZeroPeril, and is located in the AMD Platform Security Processor (PSP) driver, which is AMD's equivalent to Intel's SGX technology.
It is also known as a trusted execution environment (TEE from the trusted execution environment). AMD PSP creates secure pockets within AMD processors that allow the operating system to process sensitive information within encrypted memory.
To interact with the pockets, the Windows operating system uses a kernel driver called amdsps.sys.
But a publication by Economou on Wednesday revealed two problems in this driver that allow a non-administrator user to dump system memory and look for sensitive information that manipulates the operating system.
So on Tuesday, as Microsoft released the standard updates via Patch Tuesday, AMD officially released the vulnerability, urging anyone interested to apply the updates they contained and the AMD Chipset Driver updates.
AMD recommends updating to AMD PSP driver 5.17.0.0 through Windows Update or by updating to AMD Chipset Driver 3.08.17.735.
The company said that the following products are affected by the vulnerability, and those who use them should inform immediately:
George is still wondering what he is doing here….
