Intel and AMD Address Over 80 Vulnerabilities in August Patch Releases
Chipmakers Intel and AMD have collectively released patches for more than 80 vulnerabilities, including several high-severity flaws that could lead to privilege escalation and code execution.
Intel and AMD have issued significant security updates, patching a combined total of over 80 vulnerabilities across their product lines. This dual release, coinciding with typical "Patch Tuesday" schedules, addresses a range of security weaknesses, from critical privilege escalation and code execution flaws to medium-severity issues impacting various software and hardware components.
Intel's contribution includes 42 new advisories detailing 72 vulnerabilities. Among the most concerning are high-severity flaws found in PROSet/Wireless WiFi software, which could permit attackers to escalate privileges or launch denial-of-service (DoS) attacks. Additionally, critical vulnerabilities affecting Xeon processors, Data Center Attestation Primitives, Alias Checking Trusted Module for Xeon processors, TDX, Active Management Technology, and CSME/SPS have been resolved, with potential impacts including privilege escalation, information disclosure, and local code execution.
The chip giant also addressed a number of medium-severity vulnerabilities across a broad spectrum of its software and tools. These include issues in products like Transfer Learning Tool, Extension for PyTorch, LLM-on-Ray, Gaudi Container Runtime, and various AI-related frameworks and libraries. While rated medium, these vulnerabilities could still be exploited for privilege escalation, DoS, and information disclosure, underscoring the need for comprehensive patching.
AMD, in parallel, released five new advisories covering a dozen vulnerabilities. A notable set of five high-severity issues were identified within the Vitis development environment. Exploitation of these flaws could result in the disclosure of private keys, privilege escalation, and the execution of arbitrary code. AMD has also patched arbitrary code execution vulnerabilities in its Ryzen Master Utility, SEV-SNP, and Power Design Manager.
These updates come shortly after AMD disclosed a Safe RET interrupt vulnerability and the PowerHooK attack method, indicating a continuous effort to address emerging security threats within their hardware and software ecosystems. The timely patching of these vulnerabilities is crucial for users of Intel and AMD processors and associated software, particularly in enterprise and high-performance computing environments where such flaws could have significant ramifications.
The scope of these patches highlights the ongoing challenges in securing complex semiconductor and software supply chains. Vulnerabilities in foundational technologies like processors and development tools can have far-reaching consequences, impacting everything from consumer devices to critical infrastructure. Both Intel and AMD continue to emphasize the importance of customers applying these updates promptly to mitigate potential risks.
Users and organizations relying on Intel and AMD products are strongly advised to review the specific advisories released by each vendor. The detailed information within these advisories, including affected product versions and specific CVE identifiers, is essential for prioritizing and implementing the necessary security patches. Proactive patching remains a cornerstone of cybersecurity defense against the ever-evolving threat landscape.