CVE-2022-23829
published 2024-06-18CVE-2022-23829: A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode…
high8.2CVSS 3.1
AVLACLPRHUINSCCHIHAH
A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | 1st_gen_amd_epyc_processors | — | — |
| amd | 2nd_gen_amd_epyc_processors | — | — |
| amd | 3rd_gen_amd_epyc_processors | — | — |
| amd | amd_athlon_3000_series_mobile_processors_with_radeon_graphics | — | — |
| amd | amd_epyc_embedded_3000 | — | — |
| amd | amd_epyc_embedded_7002 | — | — |
| amd | amd_epyc_embedded_7003 | — | — |
| amd | amd_ryzen_3000_series_desktop_processors | — | — |
| amd | amd_ryzen_3000_series_mobile_processor_2nd_gen_amd_ryzen_mobile_processor_with_r | — | — |
| amd | amd_ryzen_4000_series_desktop_processors_with_radeon_graphics | — | — |
| amd | amd_ryzen_4000_series_mobile_processors | — | — |
| amd | amd_ryzen_5000_series_desktop_processors | — | — |
| amd | amd_ryzen_5000_series_mobile_processors | — | — |
| amd | amd_ryzen_5000_series_mobile_processors_with_radeon_graphics | — | — |
| amd | amd_ryzen_6000_series_mobile_processors_and_workstations | — | — |
| amd | amd_ryzen_7000_series_desktop_processors | — | — |
| amd | amd_ryzen_threadripper_pro_processor | — | — |
| amd | amd_ryzen_threadripper_pro_processors_5900_wx-series | — | — |
| amd | amd_ryzentm_embedded_5000 | — | — |
| amd | amd_ryzentm_embedded_r1000 | — | — |
| amd | amd_ryzentm_embedded_r2000 | — | — |
| amd | amd_ryzentm_embedded_v1000 | — | — |
| amd | amd_ryzentm_embedded_v2000 | — | — |
| amd | amd_ryzentm_embedded_v3000 | — | — |