CVE-2018-8930 The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.
CriticalCVSS 9.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen mobile firmware | All versions | No fix listed |
| amd ryzen pro firmware | All versions | No fix listed |
| amd epyc server firmware | All versions | No fix listed |
| amd ryzen firmware | All versions | No fix listed |
References
- amdflaws.com third-party-advisory
- blog.trailofbits.com third-party-advisory
- community.amd.com vendor-advisory
- safefirmware.com third-party-advisory
- support.hpe.com