CVE-2022-23829

CVE-2022-23829 describes a potential weakness in AMD SPI protection features that could allow a Ring0 (kernel mode) attacker to bypass native SMM ROM protections. AMD's bulletin (AMD-SB-1041) lists affected products across Ryzen Ryzen 5000/6000/7000 series, Threadripper PRO, and EPYC generations,...