CVE-2023-20596: AMD Ryzen™ 5000 Series Desktop Processor with Radeon™

Описание

Оригинално описание

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.

Засегнати продукти

• AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4: various
• AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael”: various
• AMD Ryzen™ 7000 Series Desktop Processors with Radeon™ Graphics Formerly codenamed “Raphael” X3D: various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Cezanne”: various
• AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics "Rembrandt": various
• AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics “Rembrandt-R”: various
• AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics Formerly codenamed “Phoenix”: various

История

Други уязвимости в AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4

• CVE-2023-20571
• CVE-2023-20565
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-20596
• https://nvd.nist.gov/vuln/detail/CVE-2023-20596
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7011