Torvalds, in a Google+ discussion, wrote:
"When was the last time you saw a security advisory that was basically 'if you replace the BIOS or the CPU microcode with an evil version, you might have a security problem?' Yeah."
Or, as a commenter put it on the same thread, "I just found a flaw in all of the hardware space. No device is secure: if you have physical access to a device, you can just pick it up and walk away. Am I a security expert yet?"

....Why would they possibly do this? For Torvalds: "It looks more like stock manipulation than a security advisory to me."
​Linus Torvalds slams CTS Labs over AMD vulnerability report | ZDNet