Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
| Vendor | Product | Versions |
|---|---|---|
| AMD | Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” | various |
| AMD | Ryzen™ 7000 Series Desktop Processors “Raphael” XD3 | various |
| AMD | AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt" | various |
| AMD | AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt | R” — various |
| AMD | AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” | various |
| AMD | AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo | R” — various |
| AMD | Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8 | various |
| AMD | AMD Ryzen™ Embedded V3000 | various |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.