Amd Epyc 7001 Series Processors
Monthly
Transient execution side-channel exposure in AMD EPYC 7001 Series and EPYC Embedded 3000 Series processors permits a local low-privileged attacker to leak limited sensitive data through the floating point divisor unit's microarchitectural state during speculative execution. Exploitation is constrained to local access with specific attack conditions present (CVSS 4.0 AT:P), placing this firmly in the Spectre/Meltdown class of hardware-level vulnerabilities. No public exploit code or active exploitation has been identified; EPSS sits at 0.01% (1st percentile) and CISA SSVC rates exploitation as none with non-automatable attack path.
Transient execution side-channel exposure in AMD EPYC 7001 Series and EPYC Embedded 3000 Series processors permits a local low-privileged attacker to leak limited sensitive data through the floating point divisor unit's microarchitectural state during speculative execution. Exploitation is constrained to local access with specific attack conditions present (CVSS 4.0 AT:P), placing this firmly in the Spectre/Meltdown class of hardware-level vulnerabilities. No public exploit code or active exploitation has been identified; EPSS sits at 0.01% (1st percentile) and CISA SSVC rates exploitation as none with non-automatable attack path.