Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dell Poweredge Dsa2023355 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Nov 14, 2023 |
| Suse | — | Upgrade kernel-firmware-tiUpgrade kernel-firmware-soundUpgrade kernel-firmware-intelUpgrade kernel-firmware-i915Upgrade kernel-firmware-allUpgrade kernel-firmware-networkUpgrade kernel-firmwareUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-qcomUpgrade kernel-firmware-nfpUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-radeonUpgrade kernel-firmware-mediaUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-nvidiaUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-presteraUpgrade kernel-firmware-brcmUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-serialUpgrade kernel-firmware-atherosUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-realtekUpgrade kernel-firmware-platformUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-marvellUpgrade kernel-firmware-liquidioUpgrade ucode-amdUpgrade kernel-firmware-usb-network | Dec 7, 2023 | Nov 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub