AMD Ryzen Security Breach

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. AMD Ryzen suffers from a security vulnerability that stems from incorrect input validation in the SMM Supervisor that could allow an attacker with a compromised SMI handler to gain Ring0 access, which could lead to...

AMD CPU Competitive Conditions Issue Vulnerability

AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from a race condition in the System Management Mode SMM code that could allow an attacker to use compromised user space for exploitation, which could lead to escalation o...

PT-2023-17466 · Unknown · System Management Mode

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to potentially result in privilege escalation. Recommendations: A...

PT-2023-17464 · Unknown · System Management Mode

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: The issue is related to insufficient protections in System Management Mode SMM code, which may allow an attacker to potentially enable escalation of privilege via local...

AMD Client Vulnerabilities – November 2023

Bulletin ID: AMD-SB-4002 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Secure Processor ASP, AMD System Management Unit SMU, and other platform components were reported, and mitigations are being...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. The AMD EPYC suffers from a security vulnerability that stems from insufficient validation of the DRAM address in the System Management Unit SMU, whic...

AMD CPU Security Vulnerability

AMD CPUs are a family of CPUs from Ultraviolet Semiconductor AMD. The AMD CPUs suffer from a security vulnerability that stems from insufficient protection in the System Management Mode SMM code could allow an attacker to achieve privilege escalation via local access...

AMD System Management Mode Security Vulnerability

AMD System Management Mode is a system management mode from Ultraviolet Semiconductor AMD. A CPU execution mode. A security vulnerability exists in AMD System Management Mode that stems from improper access control in System Management Mode SMM that could allow an attacker to write to the SPI ROM...

PT-2023-17453 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may allow an attacker to read or write from an...

PT-2023-12738 · Unknown +1 · System Management Mode +1

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: The issue is related to improper access control in System Management Mode SMM, which may allow an attacker to write to SPI ROM, potentially leading to arbitrary code...

PT-2023-8272 · Amd +1 · Amd Processor Firmware +1

Name of the Vulnerable Software and Affected Versions: AMD affected versions not specified Description: The issue is related to the implementation of System Management Mode SMM in AMD processor firmware, specifically due to insufficient input validation. This could allow a remote attacker to...

PT-2023-17462 · Unknown · System Management Mode

Name of the Vulnerable Software and Affected Versions: System Management Mode SMM affected versions not specified Description: Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access. Recommendations: At the...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. The AMD EPYC suffers from a security vulnerability that stems from insufficient validation of the DRAM address in the System Management Unit SMU, whic...

PT-2023-12583 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may allow an attacker to read or write from an...

AMD CPU Security Vulnerability

AMD CPUs are a family of CPUs from UltraMicroelectronics AMD. The AMD CPUs suffer from a security vulnerability that stems from insufficient protection in the System Management Mode SMM code could allow an attacker to achieve privilege escalation via local access...

AMD EPYC Security Vulnerability

AMD EPYC is an x86 architecture server microprocessor product line from AMD, known as "Xiao Long" in Chinese, utilizing the Zen microarchitecture. A security vulnerability exists in AMD EPYC, which stems from a possible change in the SMM configuration when SNP is enabled, resulting in a loss of...

PT-2023-12740 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a potential limited loss of guest memory integrity due to SMM configuration not being immutable as intended when SNP is enabled...

Lenovo Bios Input Validation Error Vulnerability

Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. Lenovo Bios suffers from an input validation error vulnerability that stems from a potential vulnerability in the SMI callback function of the OemSmi driver...

Lenovo Bios Buffer Error Vulnerability

Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. Lenovo Bios suffers from a buffer error vulnerability that stems from a memory leak vulnerability in the NvmramSmm SMM driver...

CVE-2023-39283

An SMM memory corruption vulnerability in the SMM driver SMRAM write in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation...