I'm just going to pretend I didn't buy any AMD surface laptops.

Updated amd64-microcode for EPYC processors appears available for several distributions which has mitigations available. I went ahead and proactively grabbed the microcode update from Debian unstable (not the best practice) and applied it without issue to my Bullseye/EPYC.

This isn't exactly condoned as it's not officially a backport, but I'll take my chances as this is pretty critical.

Date of the updated microcode should be July 19th.

Oh hey look, AMD stock went up 2% today.

If so, it's not a fix but a patch.

This is not a back-end at all...

Welp. Thankfully my current AMD desktop PC will be the last one I'll be using in my whole lifetime -- RISC-V 4va. :^)

This is pretty bad but it needs local access to a server/workstation as well as pretty sophisticated knowledge/tools to exploit. Even then there's no guarantee of getting any relevant information out of it. Anything with frequent enough logins/hashes going through the local system is probably a server someplace, and if its important you should have it physically locked away and access controlled.