5.4 Moyenne

CVE-2026-0438 A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory

Description

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Versions non publiées
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Versions non publiées
AMD Ryzen™ 7000 Series Desktop Processors	Versions non publiées
AMD Ryzen™ 9000HX Series Processors	Versions non publiées
AMD Ryzen™ AI 300 Series Processors	Versions non publiées
AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Versions non publiées
AMD Ryzen™ 8000 Series Desktop Processors	Versions non publiées
AMD Ryzen™ 9000 Series Desktop Processors	Versions non publiées
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Versions non publiées

Afficher les 16 autres branches

Produit	Versions touchées	Corrigé en
AMD Ryzen™ AI Max 300 Series Processors	Versions non publiées
AMD Ryzen™ Z1 Series Processors	Versions non publiées
AMD Ryzen™ Z2 Series Processors Extreme	Versions non publiées
AMD Ryzen™ Z2 Series Processors	Versions non publiées
AMD Ryzen™ Threadripper™ 7000 Processors	Versions non publiées
Not public	Versions non publiées
AMD Ryzen™ Threadripper™ 9000 Processors	Versions non publiées
AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors	Versions non publiées
AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")	Versions non publiées
AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")	Versions non publiées
AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge")	Versions non publiées
AMD Ryzen™ Embedded 9000 Series Processors	Versions non publiées
AMD Ryzen™ Embedded 8000 Series Processors	Versions non publiées
AMD Ryzen™ Embedded 7000 Series Processors	Versions non publiées
AMD EPYC™ 4004 Series Processors	Versions non publiées
AMD EPYC™ 4005 Series Processors	Versions non publiées

Références

www.amd.com www.amd.com
www.amd.com www.amd.com

Chronologie

Publiée 15 mai 2026
Dernière modification 19 mai 2026

Les 38 CVE de AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics →

CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Moyenne CVE-2024-36343 Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to… 4.6 Moyenne CVE-2025-0044 An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially… 4.8 Moyenne CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Moyenne

Suivre cette CVE