AMD System Management Mode 数据伪造问题漏洞

AMD System Management Mode is a system management mode from AMD in the United States. It is a CPU execution mode. A security vulnerability exists in AMD System Management Mode that stems from a failure to validate a protocol in SMM, which could allow an attacker to take control of the protocol an...

CVE-2022-24418

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...

AMD System Management Unit 权限许可和访问控制问题漏洞

The AMD System Management Unit SMU is a system management unit of AMD Corporation. A security vulnerability exists in the AMD System Management Unit that originates from reading data from the boot ROM to compromise system integrity...

PT-2022-9734 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient DRAM address validation, which may lead to a denial of service due to DMA read/write operations from/to invalid DRAM addresses...

AMD System Management Unit 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. An input validation error vulnerability exists in the AMD System Management Unit that stems from an insufficient DRAM address validation in the AMD System Management Unit SMU could result in a DMA Direct...

PT-2022-9724 · Amd · Athlon™ Series +53

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a failure to verify the protocol in SMM, which may allow an attacker to control the protocol and modify SPI flash, potentially...

AMD System Management Unit 信息泄露漏洞

The AMD System Management Unit SMU is a system management unit of AMD Corporation. A security vulnerability exists in the AMD System Management Unit that originates from the use of a malicious or corrupted user application UApp or AGESA bootloader ABL to filter arbitrary memory from the ASP stage...

AMD System Management Unit 输入验证错误漏洞

The AMD System Management Unit SMU is a system management unit of AMD Corporation. A security vulnerability exists in the AMD System Management Unit that originates from the use of a malicious or corrupted UApp or ABL to issue a malformed system call, thereby compromising system integrity and...

CVE-2021-26376

Insufficient checks in System Management Unit SMU FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service...

CVE-2021-26378

Insufficient bound checks in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...

CVE-2021-26378

Insufficient bound checks in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...

CVE-2021-26373

Insufficient bound checks in the System Management Unit SMU may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service...

CVE-2021-26376

Insufficient checks in System Management Unit SMU FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service...

CVE-2021-26375

Insufficient General Purpose IO GPIO bounds check in System Management Unit SMU may result in access/updates from/to invalid address space that could result in denial of service...

CVE-2021-26372

Insufficient bound checks related to PCIE in the System Management Unit SMU may result in access to an invalid address space that could result in denial of service...

CVE-2021-26350

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service...

Design/Logic Flaw

Insufficient bound checks in the System Management Unit SMU may result in a system voltage malfunction that could result in denial of resources and/or possibly denial of service...

Input validation

Insufficient checks in System Management Unit SMU FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service...

CVE-2021-26376

CVE-2021-26376 is referenced across multiple SUSE kernel-firmware advisories (SUSE-SU-2022-1840/1846/1847-1, etc.) as part of a family of SMU flaws. The description in the CVE entry states that insufficient checks in the System Management Unit (SMU) FeatureConfig may reenforce features and cause ...

CVE-2021-26378

CVE-2021-26378 is an SMU (System Management Unit) bound-check issue that can cause denial of service by exposing invalid address space. The descriptor in the initial document states only a bound-check deficiency in the SMU leading to DoS, with CVSS v3.1 base score 5.5 (Local, Low privileges requi...