Not rated
CVE-2023-20571 A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage…
Description
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | Versions not published | |
| Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 | Versions not published | |
| Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” | Versions not published | |
| AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | Versions not published | |
| AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R” | Versions not published | |
| AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | Versions not published | |
| AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R” | Versions not published | |
| Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8 | Versions not published |
Other CVEs of Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”
The 7 CVEs of Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” →
CVE-2023-20565
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation…
Not rated
CVE-2023-20563
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation…
7.8
High
CVE-2022-23821
Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to…
Not rated
CVE-2021-46758
Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to…
Not rated