AMD Firmware Update Exposes Consumers to Memory Attacks

• •AMD disabled TSME on consumer Ryzen CPUs, leaving them vulnerable to attacks.
• •The change was made without user notification, raising trust issues.
• •TSME was previously a critical feature for protecting memory data from exploits.

AMD has removed the Transparent Secure Memory Encryption (TSME) feature from consumer Ryzen processors via a firmware update, restricting it to Ryzen Pro and EPYC models. This change, which was not communicated to users, leaves many consumer-grade CPUs vulnerable to physical attacks such as cold-boot exploits and memory snooping. The issue was discovered by a security researcher who found that TSME was absent in the latest AGESA firmware version 1.2.7.0. Previously, TSME provided essential encryption to protect data in memory, making it difficult for attackers to access sensitive information. The lack of this feature may significantly impact the security posture of users relying on these processors. AMD has not publicly addressed the controversy in detail, leading to concerns about user trust and potential vulnerabilities. The scope of the impact includes all consumer Ryzen processors that received the update, potentially affecting millions of users.