CVE-2022-23829
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
- Score
- CVSS 3.1 8.2 High
- Status
- Deferred - psirt@amd.com
- Published
- 2024-06-18
- Last modified
- 2024-08-29
- Weaknesses
- CWE-284
Affected products
- 1st Gen Amd Epyc Processors (Amd)
- 2nd Gen Amd Epyc Processors (Amd)
- 3rd Gen Amd Epyc Processors (Amd)
- Amd Athlon 3000 Series Mobile Processors With Radeon Graphics (Amd)
- Amd Epyc Embedded 3000 (Amd)
- Amd Epyc Embedded 7003 (Amd)
- Amd Epyc Tm Embedded 7002 (Amd)
- Amd Ryzen 3000 Series Desktop Processors (Amd)
- Amd Ryzen 3000 Series Mobile Processor 2nd Gen Amd Ryzen Mobile Processor With Radeon Graphics (Amd)
- Amd Ryzen 4000 Series Desktop Processors With Radeon Graphics (Amd)
- Amd Ryzen 4000 Series Mobile Processors (Amd)
- Amd Ryzen 5000 Series Desktop Processors (Amd)
- Amd Ryzen 5000 Series Mobile Processors (Amd)
- Amd Ryzen 5000 Series Mobile Processors With Radeon Graphics (Amd)
- Amd Ryzen 6000 Series Mobile Processors And Workstations (Amd)
- Amd Ryzen 7000 Series Desktop Processors (Amd)
- Amd Ryzen Threadripper Pro Processor (Amd)
- Amd Ryzen Threadripper Pro Processors 5900 Wx-series (Amd)
- Amd Ryzentm Embedded 5000 (Amd)
- Amd Ryzentm Embedded R1000 (Amd)
- Amd Ryzentm Embedded R2000 (Amd)
- Amd Ryzentm Embedded V1000 (Amd)
- Amd Ryzentm Embedded V2000 (Amd)
- Amd Ryzentm Embedded V3000 (Amd)
- Ryzen 6600h (Amd)
- Ryzen 6600hs (Amd)
- Ryzen 6600u (Amd)
- Ryzen 6800h (Amd)
- Ryzen 6800hs (Amd)
- Ryzen 6800u (Amd)
- Ryzen 6900hs (Amd)
- Ryzen 6900hx (Amd)
- Ryzen 6980hs (Amd)
- Ryzen 6980hx (Amd)
- Ryzen Threadripper Pro 5945wx (Amd)
- Ryzen Threadripper Pro 5955wx (Amd)
- Ryzen Threadripper Pro 5965wx (Amd)
- Ryzen Threadripper Pro 5975wx (Amd)
- Ryzen Threadripper Pro 5995wx (Amd)
References
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-1041.html
