All Ryzen processors vulnerable to leaks (passwords etc)

[Fielder 3,678]

But it can be fixed. Unfixed means somebody can read your computer data. Passwords, credit card numbers at online stores.

https://www.tomshardware.com/news/amd-chipset-vulnerability-leaks-passwords

It is easy using Windows Device Manager to check if you have the new MB chipset driver late enough to cure the issue. You can get to Device Manager from Settings or from Control Panel.

Device Manager, Security Devices, AMD PSP, Properties, Driver. Driver Version. It needs to be 5.17.0.0 or higher to plug the leaks.

Ryzen chipsets are all socket AM4, you put AM4 in the drop down box on the AMD website, and then your MB type (like B450 or whatever).

MB type can be verified by typing msinfo32 in your taskbar or Start button search window, it is called Baseboard Product. It can also be found somewhere in your BIOS screens.

Example MB type: X470, B450, B550, etc.

AMD website driver download box: AM4 in drop down box, then B450 (or whatever you have). Download driver. Install.

The AMD install app is very slow and appears to freeze. It isn't frozen so don't back out, just wait for it to finish. Then restart Windows and recheck in Device Manager for the driver version.

[Bobsk8 12,735]

MY PC was purchased in February of this year, and mine is up to date. 

[KL Oo 700]

12 minutes ago, Bobsk8 said:

MY PC was purchased in February of this year, and mine is up to date. 

Thanks Bob.

[ricka47 611]

Thanks for the information. Mine needed to be updated.

[ray hughes 165]

Thank you ..and updated!!

 

[bsmfinegan 12]

Thanks for the heads up!

Bryan.

[Republic3D 1,232]

Thanks for the tip.

Apparently Microsoft had not updated it, and even if I tried updating it through Device Manager it would say I had the latest version.

So I found it through the AMD pages like suggested, and I only installed the PSP driver and left the others untouched.

Now it's confirming version 5.17 in Device Manager. 

[PuffeB 27]

Thanks!!!

I've updated my chipset drivers. No problems.

[styckx 1,871]

This literally has nothing to do with MSFS and the fact it's even in this sub forum is misleading amongst itself 

[himmelhorse 1,276]

Fielder,

Mine is now updated. I want to thank you so much for the heads up and I am sure the others who have updated subsequent to your post are all grateful too.

VERY much appreciated

Regards

Tony

[JeffF 26]

@Fielder If it weren't for you I wouldn't have known about this;  I updated this morning.  Thanks much!!

 

Jeff Foster

Edited September 21, 2021 by JeffF

[Luke 782]

On 9/20/2021 at 4:25 PM, Fielder said:

Unfixed means somebody can read your computer data. Passwords, credit card numbers at online stores.

My reading of that article is that the vulnerability exists if the attacker can run a process on the same physical machine, which is an issue in a public cloud environment.

In a personal environment, if an attacker can already execute a process on your PC, they probably can gain access to all this data directly anyways. No sense tunneling into the basement if a ground floor window is unlocked.

Cheers!