In a significant security update, Intel and AMD have released information on more than 200 vulnerabilities impacting their products. This announcement comes as part of the companies’ regular Patch Tuesday updates, aiming to bolster the security of their hardware and software offerings.
Intel’s Security Advisories
Intel issued 24 advisories covering slightly over 100 vulnerabilities, with three classified as critical and 20 deemed highly severe. Notably, the TDX Migration Trust Domain software faced significant scrutiny, with 30 security issues identified, including critical authentication flaws that may lead to privilege escalation and remote code execution.
Additional high-severity issues were found in Intel’s Slim Bootloader, server board firmware, and VTune Profiler software. Furthermore, denial-of-service (DoS) vulnerabilities were fixed in Intel’s Wireless WiFi, Bluetooth products, and Performance Counter Monitor software.
While many vulnerabilities received patches, Intel will not release fixes for medium-severity flaws in the discontinued BigDL software. Users are urged to uninstall or cease its use. Medium-severity issues were also resolved in various drivers and tools, enhancing the overall security landscape.
AMD’s Security Bulletins
In parallel, AMD has published 29 security bulletins and two briefs addressing approximately 100 unique vulnerabilities. While none were rated critical, several high-severity issues were identified, particularly within AMD’s graphics products, including Radeon and Instinct lines.
Among the significant vulnerabilities, a high-severity flaw in UEFI firmware could enable attackers to execute code in System Management Mode. AMD also addressed vulnerabilities that could bypass Secure Debug Unlock protections and cause denial-of-service conditions in virtual machine environments.
AMD’s updates also tackled medium-severity issues, with over two dozen vulnerabilities impacting Secure Encrypted Virtualization. The company has been working closely with academic and industry researchers to mitigate further risks, particularly concerning Transient Scheduler Attacks on Zen 5 processors.
Implications and Future Outlook
The extensive updates from both Intel and AMD highlight the ongoing challenges in securing complex hardware and software environments. While many vulnerabilities have received patches, some will require ongoing attention and further updates, extending into the coming years.
Customers are encouraged to apply the latest patches promptly to protect their systems from potential exploits. As technology evolves, both companies remain committed to addressing emerging threats and improving their products’ security resilience.
