Multiple AMD products have security vulnerabilities

The AMD System Management Unit SMU and AMD Secure Processor ASP are both products of UltraMicroelectronics AMD, Inc.The AMD System Management Unit is a system management unit.The AMD Secure Processor is a standalone AMD Secure Processor is a standalone ARM Coretex-A5 chip. A security vulnerabilit...

AMD Secure Processor security vulnerabilities

AMD Secure Encrypted Virtualization is a product of AMD Semiconductor, Inc. AMD Secure Encrypted Virtualization is a software application.AMD System Management Unit SMU is a system management unit. AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip. A security vulnerability exists in AM...

AMD System Management Unit (SMU) resource management error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient guarding and checking, resulting in access to invalid message port registers, which could lead to a denial of...

AMD Secure Processor Security Feature Vulnerability

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV. An attacker could exploit this vulnerability to cause an informati...

AMD Secure Processor security vulnerabilities

AMD Secure Processor ASP is a standalone ARM Coretex-A5 chip from UltraMicroelectronics AMD. A security vulnerability exists in AMD Secure Processor ASP, AMD System Management Unit SMU, and AMD Secure Encrypted Virtualization SEV, which stems from insufficient authentication of commands, which...

AMD System Management Unit (SMU) buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from inadequate boundary checking and could allow an attacker to update SRAM from/to address space to an invalid value,...

AMD System Management Unit (SMU) input validation vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation and could allow an attacker to incorrectly lock down resources, resulting in a denial of...

AMD System Management Unit (SMU) buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from insufficient bind checking and could allow an attacker to update the sender/receiver address space to an invalid value...

AMD System Management Unit (SMU) input validation vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in AMD System Management Unit SMU that stems from insufficient input validation of BIOS mailbox messages, which could lead to an out-of-bounds memory read that could result...

CVE-2021-26355

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

CVE-2021-26355

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

AMD Client Vulnerabilities – January 2023

Bulletin ID: AMD-SB-1031 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary In collaboration with various third parties, AMD platforms were audited for potential security exposures. Potential vulnerabilities in AMD Secure Processor ASP,...

PT-2023-1429 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient fencing and checks in the System Management Unit SMU that may result in access to invalid message port registers, potentially...

PT-2023-1488 · Amd · Amd System Management Unit +2

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified AMD System Management Unit SMU affected versions not specified AMD Secure Encrypted Virtualization SEV affected versions not specified Description: The issue is related to errors in...

CVE-2021-26355: Protection Mechanism Failure

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

PT-2023-1373 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient input validation in the SMU, which may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus, potentially...

PT-2023-1374 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bound checks in the SMU, which may allow an attacker to update the SRAM from/to address space to an invalid value, potentially...

PT-2023-1471 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient input validation in the System Management Unit SMU of AMD processors. This may allow an attacker to improperly lock resources,...

PT-2023-1482 · Amd · Amd System Management Unit +1

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP and System Management Unit SMU affected versions not specified Description: The issue is related to the software interfaces of ASP and SMU, which may not properly enforce the SNP memory security policy. This could lea...

PT-2023-1371 · Amd · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: AMD System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bound checks in the SMU, which may allow an attacker to update the from/to address space to an invalid value, potentially resulti...