A team of Google researchers working with AMD recently discovered a major CPU exploit on Zen-based processors. The exploit allows anyone with local admin privileges to write and push custom microcode updates to affected CPUs. The same Google team has released the full deep-dive on the exploit, including how to write your own microcode. Anyone can now effectively jailbreak their own AMD CPUs.

The exploit affects all AMD CPUs using the Zen 1 to Zen 4 architectures. AMD released a BIOS patch plugging the exploit shortly after its discovery, but any of the above CPUs with a BIOS patch before 2024-12-17 will be vulnerable to the exploit. Though a malicious actor wishing to abuse this vulnerability needs an extremely high level of access to a system to exploit it, those concerned should update their or their organization’s systems to the most recent BIOS update.

  • Some companies refuse to boot games that aren’t running Windows 11 in secure boot mode with TPM 2.0 for remote attestation, using the TPM as a hardware ID that’s difficult to fake. Ignoring half the PC gamers who are on Windows 10 is worth it for them for fighting cheaters alone.

    I don’t think they will ban anyone until the first microcode cheats are proven to exist, but after that things may turn sideways for some AMD owners in some games.

    • Yozul@beehaw.org
      link
      fedilink
      arrow-up
      4
      ·
      2 days ago

      Okay, but I’m definitely certain that the majority of gamers running Windows 11 in secure boot mode with TPM 2.0 are running Zen 3 or 4. How many times can they cut their user-base in half before the people who are left leave because it’s a dead game?

      • We’ll have to wait and see. AMD has about 31% hardware share on the Steam hardware survey (which includes the AMD driven Steam Deck of course) and Windows 10 makes up 53% of Team’s user base. Would cutting off 31% from the 44% or PC gamers really hurt their bottom line enough to not warrant anti cheating technology? It’s a significant chunk of gamers, but they’re already dropping literally most PC gamers anyway.

        If AMD/Intel were close to a 50/50 split the story may be different, but unfortunately Intel still has most of the PC market share. I think gamers may be tricked into calling AMD hardware “cheater hardware” before calling out their favourite games companies.