PT-2023-12095 · Smu · Smu

CVE-2021-26379 · Publicado 2023-05-09 · Atualizado 2025-01-28

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SMU (affected versions not specified)

Description The issue is related to insufficient input validation of mailbox data in the SMU, which may allow an attacker to coerce the SMU to corrupt SMRAM. This could potentially lead to a loss of integrity and privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2021-26379

Produtos afetados

Smu

Referências · 5

• https://t.me/cvenotify/50064 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2021-26379 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2021-26379 · Nota de Segurança
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 · Aviso do Fabricante
• https://t.me/cvenotify/108877 · Publicação no Telegram