Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade iwl4965-firmwareUpgrade iwl6050-firmwareUpgrade iwl2000-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl5000-firmwareUpgrade iwl7260-firmwareUpgrade iwl135-firmwareUpgrade iwl100-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl3945-firmwareUpgrade iwl6000-firmwareUpgrade iwl1000-firmwareUpgrade iwl105-firmwareUpgrade iwl2030-firmwareUpgrade iwl5150-firmwareUpgrade iwl3160-firmwareUpgrade linux-firmware | Aug 21, 2024 | Aug 12, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 12, 2024 |
| Dell Poweredge Dsa2024344 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 9, 2024 |
| Freebsd | — | Upgrade cpu-microcode-amd | Dec 10, 2025 | Aug 10, 2024 |
| Oracle_linux | — | Upgrade iwl2000-firmwareUpgrade iwl2030-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl7260-firmwareUpgrade iwl3945-firmwareUpgrade iwl135-firmwareUpgrade iwl6000g2a-firmwareUpgrade linux-firmware-whenceUpgrade iwl100-firmwareUpgrade iwl105-firmwareUpgrade linux-firmware-coreUpgrade linux-firmwareUpgrade iwl5150-firmwareUpgrade iwl1000-firmwareUpgrade liquidio-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl6050-firmwareUpgrade netronome-firmwareUpgrade iwl3160-firmwareUpgrade iwlax2xx-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl4965-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl6000-firmwareUpgrade iwl5000-firmware | Aug 16, 2024 | Aug 9, 2024 |
| Redhat_linux | — | Upgrade libertas-usb8388-firmwareUpgrade iwl100-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl5150-firmwareUpgrade iwl2030-firmwareUpgrade linux-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl6050-firmwareUpgrade iwl105-firmwareNo solution existsUpgrade iwl135-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl1000-firmwareUpgrade iwl6000-firmwareUpgrade iwl5000-firmwareUpgrade iwl3160-firmwareUpgrade iwl4965-firmwareUpgrade iwl7260-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl2000-firmwareUpgrade iwl3945-firmware | Oct 7, 2024 | Aug 12, 2024 |
| Suse | — | Upgrade kernel-firmware-soundUpgrade kernel-firmware-realtekUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-tiUpgrade kernel-firmware-platformUpgrade kernel-firmware-presteraUpgrade kernel-firmware-marvellUpgrade kernel-firmware-radeonUpgrade kernel-firmware-intelUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-mediaUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-amdgpuUpgrade kernel-firmware-serialUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-brcmUpgrade kernel-firmware-i915Upgrade kernel-firmware-qcomUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-atherosUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-nfpUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-mellanoxUpgrade kernel-firmwareUpgrade kernel-firmware-networkUpgrade ucode-amdUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-all | Aug 15, 2024 | Aug 12, 2024 |
| Ubuntu | — | Upgrade amd64-microcodeUpgrade amd64-microcode (Ubuntu Pro) | Oct 23, 2024 | Aug 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub