Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7002 Processors

Default version status: unknown

  • Rome PI 1.0.0.Kunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: unknown

  • ChagallWSPI-sWRX8 1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors

Default version status: unknown

  • CastlePeakWSPI-sWRX8 1.0.0.Eunaffected

AMD AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors

Default version status: unknown

  • ChagallWSPI-sWRX8 1.0.0.9unaffected

AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Default version status: unknown

  • StormPeakPI-SP6 1.1.0.0hunaffected

AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors

Default version status: unknown

  • StormPeakPI-SP6 1.0.0.1junaffected

AMD AMD EPYC™ Embedded 7002 Processors

Default version status: unknown

  • EmbRomePI-SP3 1.0.0.Dunaffected

References