CVE-2020-12965

High

Description

When combined with specific software sequences, AMD CPUs may transiently execute non-canonical loads and store using only the lower 48 address bits potentially resulting in data leakage.

SeverityHigh
CVSS7.5
Exploit probability—
ProductAmd Ryzen Pro 5650g Firmware
PublishedFeb 4, 2022
First seenFeb 4, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
amd ryzen_pro_5650g_firmwareNo range specified—
amd ryzen_pro_5650ge_firmwareNo range specified—
amd ryzen_pro_5750g_firmwareNo range specified—
amd ryzen_pro_5750ge_firmwareNo range specified—
amd ryzen_pro_5350g_firmwareNo range specified—
amd ryzen_pro_5350ge_firmwareNo range specified—
amd ryzen_pro_4750g_firmwareNo range specified—
amd ryzen_pro_4750ge_firmwareNo range specified—
amd ryzen_pro_4650g_firmwareNo range specified—
amd ryzen_pro_4650ge_firmwareNo range specified—
amd ryzen_pro_4350g_firmwareNo range specified—
amd ryzen_pro_4350ge_firmwareNo range specified—
amd ryzen_pro_3900_firmwareNo range specified—
amd ryzen_pro_3700_firmwareNo range specified—
amd ryzen_pro_3600_firmwareNo range specified—
amd ryzen_pro_3400g_firmwareNo range specified—
amd ryzen_pro_3400ge_firmwareNo range specified—
amd ryzen_pro_3350g_firmwareNo range specified—
amd ryzen_pro_3200g_firmwareNo range specified—
amd ryzen_pro_3200ge_firmwareNo range specified—
amd ryzen_pro_2400g_firmwareNo range specified—
amd ryzen_pro_2400ge_firmwareNo range specified—
amd ryzen_pro_2200g_firmwareNo range specified—
amd ryzen_pro_2200ge_firmwareNo range specified—
amd ryzen_threadripper_pro_3995wx_firmwareNo range specified—
amd ryzen_threadripper_pro_3975wx_firmwareNo range specified—
amd ryzen_threadripper_pro_3955wx_firmwareNo range specified—
amd ryzen_threadripper_pro_3945wx_firmwareNo range specified—
amd athlon_gold_pro_3150g_firmwareNo range specified—
amd athlon_gold_pro_3150ge_firmwareNo range specified—
amd athlon_silver_pro_3125ge_firmwareNo range specified—
amd athlon_pro_300ge_firmwareNo range specified—
amd athlon_pro_200ge_firmwareNo range specified—
amd ryzen_threadripper_3990x_firmwareNo range specified—
amd ryzen_threadripper_3970x_firmwareNo range specified—
amd ryzen_threadripper_3960x_firmwareNo range specified—
amd ryzen_threadripper_2990wx_firmwareNo range specified—
amd ryzen_threadripper_2970wx_firmwareNo range specified—
amd ryzen_threadripper_2950x_firmwareNo range specified—
amd ryzen_threadripper_2920x_firmwareNo range specified—
amd ryzen_threadripper_1950x_firmwareNo range specified—
amd ryzen_threadripper_1920x_firmwareNo range specified—
amd ryzen_threadripper_1900x_firmwareNo range specified—
amd ryzen_5950x_firmwareNo range specified—
amd ryzen_5800x3d_firmwareNo range specified—
amd ryzen_5900x_firmwareNo range specified—
amd ryzen_5800x_firmwareNo range specified—
amd ryzen_5600x_firmwareNo range specified—
amd ryzen_5700g_firmwareNo range specified—
amd ryzen_5600g_firmwareNo range specified—
amd ryzen_5700ge_firmwareNo range specified—
amd ryzen_5600ge_firmwareNo range specified—
amd ryzen_5300g_firmwareNo range specified—
amd ryzen_5300ge_firmwareNo range specified—
amd ryzen_4700g_firmwareNo range specified—
amd ryzen_4600g_firmwareNo range specified—
amd ryzen_4300g_firmwareNo range specified—
amd ryzen_4700ge_firmwareNo range specified—
amd ryzen_4600ge_firmwareNo range specified—
amd ryzen_4300ge_firmwareNo range specified—
amd athlon_3150ge_firmwareNo range specified—
amd athlon_3150g_firmwareNo range specified—
amd athlon_3050ge_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-12965 · Amd Ryzen Pro 5650g Firmware · Dark Radar