HPESBCR04811 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX425 Compute Blade -Prior to v1.7.6 - HFP Firmware Pack 24.11.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-21924 |...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-0179

A flaw was found in the UEFI module's System Management Mode SMM. SMM callout within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution. Mitigation Available mitigation requires updating the BIOS...

CVE-2024-0179

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-0179

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution...

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

AMD SMM Callout Vulnerability

AMD ID: AMD-SB-7028 Potential Impact: Arbitrary Code Execution Severity: High Summary AMD SMM callout vulnerability in the AmdPlatformRasSspSmm driver supported on multiple processors. Eclypsium reported an SMM callout vulnerability within the AmdPlatformRasSspSmm UEFI module, which is supported ...

PT-2025-6389

Name of the Vulnerable Software and Affected Versions AmdPlatformRasSspSmm driver affected versions not specified Description The issue is related to an SMM callout vulnerability within the AmdPlatformRasSspSmm driver, which could allow a ring 0 attacker to modify boot services handlers,...

CVE-2024-0179: Improper Input Validation

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution...

PT-2025-6391

Name of the Vulnerable Software and Affected Versions AmdCpmDisplayFeatureSMM driver affected versions not specified Description The issue is related to a SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver. This could allow locally authenticated attackers to overwrite SMRAM,...

CVE-2024-21924: Execution with Unnecessary Privileges

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-36434

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

CVE-2024-36434

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

CVE-2024-36434

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

CVE-2024-36434

CVE-2024-36434 describes an SMM callout vulnerability in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards. The issue is located in the SMM callout component of the Supermicro BMC firmware, with a reported buffer overflow in memory. Affected BIOS firmware versions are prior to 4.4. Accord...

CVE-2024-36434: Improper Restriction of Operations within the Bounds of a Memory Buffer

An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4...

pcre2:pcre2_fuzzer_16_4l: Use-of-uninitialized-value in do_callout_jit

Project: svn://vcs.exim.org/pcre2/code/trunk https://github.com/PCRE2Project/pcre2.git Detailed Report: https://oss-fuzz.com/testcase?key=6165376946733056 Project: pcre2 Fuzzing Engine: libFuzzer Fuzz Target: pcre2fuzzer164l Job Type: libfuzzermsanpcre2 Platform Id: linux Crash Type:...

PT-2024-40714 · Git +1 · Pcre2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state includes do callout jit and jit machine stack exec functions. Recommendations: At the moment, there i...

CVE-2023-31035

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...