CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

Design/Logic Flaw

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

Design/Logic Flaw

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12961

CVE-2020-12961 affects AMD Platform Security Processor (PSP). The issue could allow an attacker to zero a privileged register on the System Management Network, potentially bypassing SPI ROM protections. Documented impact is high (CVSSv3.1: 7.8 Local, High impact) with local access and no user int...

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

CVE-2020-12954

CVE-2020-12954 relates to an AMD Platform Security Processor (ASP) boot loader header where improper input and range validation can allow attacker-controlled values before signature verification, potentially enabling arbitrary code execution and bypassing SPI ROM protections to modify SPI ROM. Th...

CVE-2020-12961: Improper Input Validation

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

CVE-2020-12954: Protection Mechanism Failure

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

PT-2021-9515

Name of the Vulnerable Software and Affected Versions AMD Platform Security Processor PSP affected versions not specified Description A potential issue exists in the AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network,...

PT-2021-8201 · Amd +1 · Amd Epyc Agesa Pi +1

Name of the Vulnerable Software and Affected Versions: AMD EPYC AGESA PI affected versions not specified Description: The issue is related to a side effect of an integrated chipset option that can be exploited by an attacker to bypass SPI ROM protections, allowing unauthorized modification of the...

UVI-2021-1001870 spi: Fix deadlock when adding SPI controllers on SPI buses

spi: Fix deadlock when adding SPI controllers on SPI buses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

GSD-2021-1001870 spi: Fix deadlock when adding SPI controllers on SPI buses

spi: Fix deadlock when adding SPI controllers on SPI buses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

PT-2021-26340

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: A potential issue exists in the Linux Kernel related to a deadlock when adding SPI controllers on SPI buses. The actual impact and attack plausibility have not yet been proven...

PT-2021-30335

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description A potential issue exists in the Linux Kernel related to a deadlock when adding SPI controllers on SPI buses. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2024-11463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a deadlock that occurs when adding SPI controllers on SPI buses. This happens because of a global lock, spi add lock, which is taken when adding new devices to...

Code injection

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...

CVE-2021-3453

CVE-2021-3453 affects Lenovo Notebook, ThinkPad, and Lenovo Desktop BIOS modules that are not protected by Intel Boot Guard, allowing a physically proximate attacker to write to the SPI flash storage. The issue stems from BIOS modules being unprotected by Boot Guard, enabling potential unauthoriz...

CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage...

PT-2021-20534

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook, ThinkPad, and Lenovo Desktop systems affected versions not specified Description: The issue affects certain Lenovo systems, including Notebooks, ThinkPads, and Desktops, where BIOS modules are not protected by Intel Boot Guar...