AMD processor families need firmware updates, bulletin AV26-1155 says
Original title: Bulletin de sécurité AMD (AV26-1155)
The November 12 bulletin lists fixed platform-initialization and driver builds but does not name CVEs or impact.
Canadian Centre for Cyber Security bulletin AV26-1155, dated November 12, 2026, says that as of November 11 AMD is affected by vulnerabilities in a wide set of processors. Listed lines include Athlon, Ryzen, EPYC, Threadripper, embedded processors and Instinct MI300A, with most entries marked affected except named platform-initialization or driver versions. The excerpt does not describe the flaws, cite CVE identifiers, or say whether they are being exploited.
Unconfirmed: The excerpt does not identify the vulnerabilities, their severity, or any exploitation.
- Bulletin serial AV26-1155 is dated November 12, 2026, with a November 11 status date.
- EPYC 9005 processors are listed as all except TurinPI 1.0.0.5 and TurinPI_1.0.0.A.
- Ryzen AI 300 is listed as all except StrixKrackanPI-FP8_1.1.0.0b.
- Some embedded Ryzen fixes are listed only as Q4 2026, including Catalyst driver 73752e.
- Instinct MI300A is listed as all except MI300A 1.0.0.B.
| Product | Affected | Fixed in |
|---|---|---|
| AMD EPYC 7003 Series Processors | all except listed MilanPI-SP3 builds | MilanPI-SP3_1.0.0.H; MilanPI-SP3_1.0.0.K |
| AMD EPYC 9005 Series Processors | all except listed TurinPI builds | TurinPI 1.0.0.5; TurinPI_1.0.0.A |
| AMD Ryzen 9000 Series Desktop Processors | all except listed ComboAM5PI builds | ComboAM5PI 1.3.0.1a; ComboAM5PI_1.2.0.3k |
| AMD Instinct MI300A Series Processors | all except MI300A 1.0.0.B | MI300A 1.0.0.B |
| AMD Ryzen AI 300 Series Processors | all except StrixKrackanPI-FP8_1.1.0.0b | StrixKrackanPI-FP8_1.1.0.0b |
- 1.Install the platform-initialization or driver versions listed as exceptions for each affected AMD product.
- Vendors
- AMD
- Organizations
- Canadian Centre for Cyber Security
From the original article
4 min read at cyber.gc.ca
Numéro de série : AV26-1155 Date : 12 novembre 2026 En date du 11 novembre 2026, AMD est touché par des vulnérabilités dans les produits suivants : AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics TOUS sauf PicassoPI-FP5_1. 0. 1.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.