PT-2025-6389 · Amd · Amdplatformrassspsmm Driver

Published 2025-02-11 · Updated 2025-02-17 · CVE-2024-21924

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AmdPlatformRasSspSmm driver (affected versions not specified)

Description The issue is related to an SMM callout vulnerability within the AmdPlatformRasSspSmm driver, which could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution. This vulnerability affects EPYC and Ryzen Threadripper processors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-250

Related Identifiers

BDU:2025-01688

CVE-2024-21924

Affected Products

Amdplatformrassspsmm Driver

References · 12

• https://bdu.fstec.ru/vul/2025-01688 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-21924 · Security Note
• https://t.me/cvedetector/17754 · Telegram Post
• https://t.me/pentestingnews/56623 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1889583495116132830 · Twitter Post
• https://twitter.com/adriananglin/status/1891399218192924699 · Twitter Post
• https://twitter.com/pravin_karthik/status/1891458195220013170 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1891305037831217161 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/amd-sb-7028.html · Note
• https://twitter.com/adriananglin/status/1891398904572244249 · Twitter Post
• https://twitter.com/CVEnew/status/1889414452744708456 · Twitter Post
• https://twitter.com/fridaysecurity/status/1891305556406685814 · Twitter Post