On July twenty fourth, 2023, AMD disclosed a safety vulnerability (CVE-2023-20593) that affected a subset of Akamai cloud computing hosts working EPYC “Rome” CPUs. Exploiting this vulnerability might enable info leakage for workloads working on susceptible {hardware}.

We’ve efficiently applied the really helpful mitigations from AMD and have confirmed that our techniques are not susceptible to exploitation. 

Whereas we’ve not seen proof of our techniques being exploited, because of the nature of this vulnerability, clients on affected AMD techniques may need to rotate any secrets and techniques saved on cloud computing cases working on AMD Zen 2 CPUs, comparable to TLS non-public keys, API keys or different software secrets and techniques, software consumer passwords, or SSH keys.

Clients can confirm whether or not their Linodes are working on affected AMD techniques by following the directions in this Linode Neighborhood Q&A submit.

Please open a ticket with our Help group within the Cloud Supervisor when you’ve got any questions on how this may influence you or your Akamai cloud computing providers.