PT-2023-12095 · Smu · Smu

Published 2023-05-09 · Updated 2025-01-28 · CVE-2021-26379

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SMU (affected versions not specified)

Description The issue is related to insufficient input validation of mailbox data in the SMU, which may allow an attacker to coerce the SMU to corrupt SMRAM. This could potentially lead to a loss of integrity and privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26379

Affected Products

Smu

References · 5

• https://osv.dev/vulnerability/CVE-2021-26379 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26379 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 · Vendor Advisory
• https://t.me/cvenotify/50064 · Telegram Post
• https://t.me/cvenotify/108877 · Telegram Post