ARM Trusted Firmware in AMD Zynq UltraScale+ MPSoC/RFSoC: Improper input validation in the ARM Trusted Firmware used

Impact

Improper input validation in the ARM Trusted Firmware used on AMD's Zynq UltraScale+ parts allows out-of-bounds reads and data leakage. Relevant to datacenter operators through the side door: Zynq and Versal parts show up as SmartNIC, DPU, storage-controller and management-plane silicon inside servers, so this is firmware running on your network path rather than on your compute path.

Who can reach it

Local to the device, requires privileged access to the ATF interface on the Zynq part.

What to do

Fixed in updated ARM Trusted Firmware from AMD/Xilinx. Delivery depends entirely on who integrated the part - a SmartNIC vendor, a storage OEM, your own board team - so tracing the update path is often harder than applying it. Requires a device firmware update and a reset of the affected card. Inventory which AMD/Xilinx adaptive SoCs are in your servers; most operators cannot answer that question, which is the real finding.

References