CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution...

CVE-2024-21924

creationtimestamp| type| source ---|---|--- 2025-02-11 21:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwleg7reu2h 2025-02-11 22:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113987688964200007 2025-02-11 23:04:32+00:00| seen|...

HPESBHF04786 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-7028: AMD System Management Mode (SMM) Callout Vulnerability, Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.4010-04-2024 HPE ProLiant XL225n Gen10 Plus 1U Node - Prior to v3.4010-04-2024 HPE ProLiant XL645d Gen10 Plus Server - Prio...