CVE-2023-20571: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™

Описание

Оригинално описание

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.

Засегнати продукти

• AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”: various
• AMD Ryzen™ 7000 Series Desktop Processors “Raphael” XD3: various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”: various
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt": various
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”: various
• AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”: various
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics “Barcelo-R”: various
• AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics “Phoenix” FP7/FP7r2/FP8: various

История

Други уязвимости в AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne”

• CVE-2023-20596
• CVE-2023-20565
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-20571
• https://nvd.nist.gov/vuln/detail/CVE-2023-20571
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002