Description
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a non-compliant DIMM, or control over the Root of Trust for BIOS update, to bypass SMM isolation potentially resulting in arbitrary code execution at the SMM level.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
AMD AMD Ryzen™ Threadripper™ 3000 Processors
Default version status: affected
CastlePeakPI-SP3r3 1.0.0.Dunaffected
AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
Default version status: affected
ChagallWSPI-sWRX8-1.0.0.Aunaffected
AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6_1.0.1.1aunaffected
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Default version status: affected
CastlePeakWSPI-sWRX8 1.0.0.Funaffected
AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
Default version status: affected
ChagallWSPI-sWRX8-1.0.0.Aunaffected
AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5_1.0.1.2aunaffected
AMD AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PhoenixPI-FP8-FP7_1.1.8.0unaffected
AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PicassoPI-FP5_1.0.1.2aunaffected
AMD AMD Ryzen™ 8000 Series Desktop Processors
Default version status: affected
ComboAM5PI_1.2.0.2aunaffected
AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
PhoenixPI-FP8-FP7_1.1.8.0unaffected
AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
RenoirPI-FP6 1.0.0.Eaunaffected
AMD AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7_1.0.0.Baunaffected
AMD AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
DragonRangeFL1_1.0.0.3funaffected
AMD AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics
Default version status: affected
RembrandtPI-FP7_1.0.0.Baunaffected
AMD AMD Ryzen™ 7000 Series Desktop Processors
Default version status: affected
ComboAM5PI_1.2.0.2aunaffected
AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics
Default version status: affected
CezannePI-FP6_1.0.1.1aunaffected
AMD AMD Ryzen™ 9000 Series Desktop Processors
Default version status: affected
ComboAM5PI_1.2.0.2aunaffected
AMD AMD Ryzen™ 3000 Series Desktop Processors
Default version status: affected
ComboAM4PI_1.0.0.CunaffectedComboAM4v2PI_1.2.0.Dunaffected
AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4PI_1.0.0.Cunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
Default version status: affected
ComboAM4v2PI_1.2.0.Dunaffected
AMD AMD Ryzen™ 4000 Series Desktop Processors
Default version status: affected
ComboAM4v2PI_1.2.0.Dunaffected
AMD AMD Ryzen™ 5000 Series Desktop Processors
Default version status: affected
ComboAM4v2PI_1.2.0.Dunaffected
AMD AMD EPYC™ Embedded 3000 Series Processors
Default version status: affected
SnowyOwl PI 1.1.0.Funaffected
AMD AMD EPYC™ Embedded 7002 Series Processors
Default version status: affected
EmbRomePI-SP3_1.0.0.Eunaffected
AMD AMD EPYC™ Embedded 7003 Series Processors
Default version status: affected
EmbMilanPI-SP3 1.0.0.Aunaffected
AMD AMD EPYC™ Embedded 9004 Series Processors
Default version status: affected
EmbGenoaPI-SP5 1.0.0.8unaffected
AMD AMD Ryzen™ Embedded 5000 Series Processors
Default version status: affected
EmbAM4PI 1.0.0.7unaffected
AMD AMD Ryzen™ Embedded V2000 Series Processors
Default version status: affected
EmbeddedPI-FP6_1.0.0.Bunaffected
AMD AMD Ryzen™ Embedded V3000 Series Processors
Default version status: affected
Embedded-PI_FP7r2 100Aunaffected
AMD AMD EPYC™ Embedded 97X4 Series Processors
Default version status: affected
EmbGenoaPI-SP5 1.0.0.8unaffected
AMD AMD Ryzen™ Embedded 7000 Series Processors
Default version status: affected
EmbeddedAM5PI 1.0.0.3unaffected
AMD AMD EPYC™ 9004 Series Processors
Default version status: affected
GenoaPI 1.0.0.Dunaffected
AMD AMD EPYC™ 7003 Series Processors
Default version status: affected
MilanPI 1.0.0.Dunaffected
AMD AMD EPYC™ 7002 Series Processors
Default version status: affected
Rome PI 1.0.0.Munaffected
AMD AMD EPYC™ 7001 Series Processors
Default version status: affected
Naples 1.0.0.Qunaffected
AMD AMD EPYC™ 9004 Series Processors
Default version status: affected
GenoaPI 1.0.0.Dunaffected
AMD AMD EPYC™ 4004 Series Processors
Default version status: affected
ComboAM5PI_1.2.0.2aunaffected
AMD AMD EPYC™ 8004 Series Processors
Default version status: affected
GenoaPI 1.0.0.Dunaffected