8.2
High
CVE-2024-21924 SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services…
Description
SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD EPYC™ 7002 Processors | Versions not published | |
| AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors | Versions not published | |
| AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors | Versions not published | |
| AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors | Versions not published | |
| AMD EPYC™ Embedded 7002 Processors | Versions not published |
Other CVEs of AMD EPYC™ 7002 Processors
The 4 CVEs of AMD EPYC™ 7002 Processors →
CVE-2024-21925
Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM,…
8.2
High
CVE-2023-20578
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or…
7.5
High
CVE-2021-46746
Lack of stack protection exploit mechanisms in ASP Secure OS Trusted Execution Environment (TEE) may allow a…
5.2
Medium