A high-severity vulnerability in AMD CPU microcode allows local administrators to execute malicious code with elevated privileges, posing a significant risk to system integrity.

This flaw, classified as CWE-459 (Incomplete Cleanup), exists in the microcode patch loading mechanism. It requires an attacker to already possess local administrator privileges to successfully exploit the vulnerability and influence instruction execution.

The ability to compromise microcode integrity allows an attacker to bypass security controls at the lowest level of the hardware stack. This risk is classified as High with a CVSS score of 7.2, as it could lead to total loss of system integrity, unauthorized data access, or persistent, undetectable backdoors.

Immediate Action: Update the system firmware or microcode to the versions specified in the vendor security bulletins, such as TurinPI 1.0.0.4 for EPYC or ComboAM5PI 1.2.0.3c for Ryzen 9000 Desktop.

Proactive Monitoring: Audit access logs for unauthorized attempts to modify system firmware or load kernel-level drivers and monitor for unexpected system behavior following administrative account activity.

Compensating Controls: Enforce strict access control policies to minimize the number of users with local administrator privileges, thereby reducing the attack surface for this privilege-dependent vulnerability.

Public Exploit Available: Unknown.

Given the potential for deep-level system compromise, organizations should prioritize the deployment of the identified firmware updates across all affected AMD hardware. Administrators must verify that their specific processor models have received the corresponding platform initialization (PI) updates, as these are critical to closing the vulnerability at the microcode level.