Almost all AMD Ryzen chips found vulnerable to side-channel SQUIP attacks

[CyberTech]

Content source

https://www.neowin.net/news/beware-apple-m1-and-many-amd-ryzen-chips-found-vulnerable-to-side-channel-squip-attacks/

A new CPU vulnerability dubbed “SQUIP”, which is the short for Scheduler Queue Usage via Interference Probing, has been discovered by security researches. Apple M1 processors and AMD Zen-based Ryzen chips, among others, have been found vulnerable to this new security flaw.

The vulnerability is related to the multi-scheduler queues in CPUs. Intel, unlike Apple and AMD, uses a single scheduler in its architecture, which means it is not affected by SQUIP. The latter however use multiple schedulers.

On the AMD side, SKUs with simultaneous multi-threading (SMT) technology are affected, which is nearly every AMD processor SKU out there except for a few models (We have listed them towards the end). The issue is tracked under the ID “CVE-2021-46778”.

Here is a summary and mitigation measures provided by AMD:

Beware: Almost all AMD Ryzen chips found vulnerable to side-channel SQUIP attacks

AMD Zen-based processors with Simultaneous Multi-threading (SMT) like Ryzen, Threadripper, EPYC, and Athlon CPUs have been found to be vulnerable to a new “SQUIP” side-channel attack.

www.neowin.net