AMD released security patches to fix a flaw that could bypass SEV protection, letting attackers load malicious microcode. Researchers from Google disclosed an improper signature verification vulnerability, tracked as CVE-2024-56161 (CVSS score of 7.2), in AMD’s Secure Encrypted Virtualization (SEV). An attacker could trigger the flaw to load a malicious CPU microcode under specific conditions. >>Improper […]
First seen on securityaffairs.com
Jump to article: securityaffairs.com/173831/security/amd-flaw-allowed-load-malicious-microcode.html
