I saw Ubuntu had a new version of Linux-firmware posted since last time I updated, but I’m not continuously updating so I’m not sure if that’s this thing or something else entirely.
It's not a bug in the PSP itself, it's a bug in the Windows driver for it. According to the security bulletin [0], it's due to a misconfiguration of DACLs (which is Windows specific), so I don't think it affects Linux users.
Am I missing something, or is this article making a big fuss out of a relatively mundane privilege escalation? "MILLIONS AFFECTED, PATCH ASAP!" If you already have access to the machine, you can read physical memory and break KASLR.
3 comments
[ 2.5 ms ] story [ 16.4 ms ] threadI saw Ubuntu had a new version of Linux-firmware posted since last time I updated, but I’m not continuously updating so I’m not sure if that’s this thing or something else entirely.
[0] https://www.amd.com/en/corporate/product-security/bulletin/a...