Often, our products are part of a larger system that may include hardware and software provided by a third-party (such as operating systems). Although AMD is not responsible for providing Security Support to third-party systems, AMD continues to work with our stakeholders, customers, and third parties as needed to stay abreast of security concerns in third party technologies.
Policy
In general, AMD employs commercially reasonable efforts to provide Security Support through the end of a Support Term for in-scope products. However, product-specific support policies may require AMD to deviate from this general principle on a case-by-case basis.
Due to variations in product lines and dependencies on third-party component providers, AMD may not provide Security Support for all components of a product line for the entire duration of its Support Term. In some cases, due to the nature of a mitigation solution and how it is implemented, some solutions may only be available in a newer product and/or product line.
In the event of a conflict between this policy and the terms and conditions of an existing service agreement, the terms and conditions of the service agreement shall govern.
For more information about AMD Vulnerability Response policy: https://www.amd.com/en/corporate/resources/product-security
Scope
The AMD products listed below are considered in-scope for Security Support:
- Hardware products:
- AMD EPYC™ processors
- AMD EPYC™ Embedded processors
- AMD Instinct™ MI Series
- AMD Ryzen™ processors
- AMD Ryzen™ Embedded processors
- AMD Ryzen™ Threadripper™ and AMD Threadripper™ PRO processors
- AMD Radeon™ Series graphics cards
- select AMD Pensando products
- select AMD Xilinx products
- AMD EPYC™ processors
- AMD Software, Technology & Tools:
- AMD µProf
- AMD Security Encrypted Virtualization (SEV)
- AMD Ryzen™ Master Utility for Overclocking Control
- AMD Optimizing CPU Libraries (“AOCL”)
- AMD Optimizing CPU Compiler (“AOCC”)
- AMD Zen Deep Neural Network (“ZenDNN”)
- AMD µProf
Definitions:
Support Term - The period during which support for a product is available. The Support Term period may be defined by a respective contract, a respective license, or a respective warranty period.
Security Support - AMD looks for ways to make our products more secure, including working closely with partners, academics, researchers, and end users in the ecosystem. We follow coordinated vulnerability disclosure practices and seek to respond quickly and appropriately to reported issues. The period during which a product is considered in-scope for Security Support may or may not coincide with the Support Term.