Description
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI shell to modify the communications buffer potentially resulting in arbitrary code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD EPYC™ 7001 Processors
Default version status: affected
NaplesPI 1.0.0.Kunaffected
AMD AMD EPYC™ 7002 Processors
Default version status: affected
RomePI 1.0.0.Gunaffected
AMD AMD EPYC™ 7003 Processors
Default version status: affected
MilanPI 1.0.0.Bunaffected
AMD AMD EPYC™ 9004 Processors
Default version status: affected
GenoaPI 1.0.0.2unaffected
AMD AMD Ryzen™ 7000 Series Desktop Processors
Default version status: affected
ComboAM5 1.0.0.1unaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000WX Processors
Default version status: unaffected
ChagallWSPI-sWRX8 1.0.0.7unaffected
AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
Default version status: affected
MendocinoPI-FT6 1.0.0.0unaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.9bunaffected
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7 1.0.0.9bunaffected
AMD AMD EPYC™ Embedded 3000
Default version status: affected
SnowyOwl PI 1.1.0.Aunaffected
AMD AMD EPYC™ Embedded 7002
Default version status: affected
EmbRomePI-SP3 1.0.0.Aunaffected
AMD AMD EPYC™ Embedded 7003
Default version status: affected
EmbMilanPI-SP3 1.0.0.7unaffected
AMD AMD EPYC™ Embedded 9003
Default version status: affected
EmbGenoaPI-SP5 1.0.0.0unaffected
AMD AMD Ryzen™ Embedded 7000
Default version status: affected
EmbeddedAM5PI 1.0.0.0unaffected
AMD AMD RyzenTM Embedded V3000
Default version status: affected
EmbeddedPI-FP7r2 1.0.0.8unaffected