@p @j @anonaccount @graf It's already fixed for some EPYC and desktop CPUs. The patch requires a bios flash or a microcode update to prevent the infection (not fix it).
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7014.html

One article I read also implies that the malware has to be loaded during boot for the exploit to work which should be preventable with secure boot.