AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

AMD disclosed a set of side-channel vulnerabilities called Transient Scheduler Attacks (TSA-L1 and TSA-SQ) that affect many AMD processors (desktop, mobile, and datacenter, including EPYC and Ryzen families). The flaws can cause incorrect data forwarding from the L1 cache or store queue, enabling local attackers (malware or malicious VM) to infer sensitive information, potentially including OS kernel data; two issues are rated medium and two low. Exploitation is complex, requires running arbitrary code on the target, and no public exploit code is known; mitigations and vendor guidance are available though some mitigations (e.g., using VERW) may degrade performance.