Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade iwl2000-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl7260-firmwareUpgrade iwl100-firmwareUpgrade iwl135-firmwareUpgrade iwl4965-firmwareUpgrade iwl6050-firmwareUpgrade iwl5000-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl3160-firmwareUpgrade iwl6000-firmwareUpgrade iwl2030-firmwareUpgrade iwl3945-firmwareUpgrade linux-firmwareUpgrade iwl1000-firmwareUpgrade iwl5150-firmwareUpgrade iwl105-firmware | Aug 21, 2024 | Aug 12, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 12, 2024 |
| Dell Poweredge Dsa2024344 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 9, 2024 |
| Freebsd | — | Upgrade cpu-microcode-amd | Dec 10, 2025 | Aug 10, 2024 |
| Oracle_linux | — | Upgrade iwl2030-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl3160-firmwareUpgrade iwl6050-firmwareUpgrade iwlax2xx-firmwareUpgrade iwl5150-firmwareUpgrade netronome-firmwareUpgrade iwl100-firmwareUpgrade linux-firmwareUpgrade liquidio-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl1000-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl105-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl6000-firmwareUpgrade iwl5000-firmwareUpgrade linux-firmware-coreUpgrade iwl4965-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl7260-firmwareUpgrade linux-firmware-whenceUpgrade iwl6000g2a-firmwareUpgrade iwl3945-firmwareUpgrade iwl2000-firmwareUpgrade iwl135-firmware | Aug 16, 2024 | Aug 9, 2024 |
| Redhat_linux | — | Upgrade libertas-sd8686-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl100-firmwareUpgrade linux-firmwareUpgrade iwl5150-firmwareUpgrade iwl2030-firmwareUpgrade iwl135-firmwareUpgrade iwl105-firmwareUpgrade iwl6050-firmwareNo solution existsUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl3945-firmwareUpgrade iwl4965-firmwareUpgrade iwl6000-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl3160-firmwareUpgrade iwl2000-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl5000-firmwareUpgrade iwl7260-firmwareUpgrade iwl1000-firmware | Oct 7, 2024 | Aug 12, 2024 |
| Suse | — | Upgrade ucode-amdUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-allUpgrade kernel-firmware-atherosUpgrade kernel-firmware-brcmUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-networkUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-i915Upgrade kernel-firmware-bnx2Upgrade kernel-firmware-ueagleUpgrade kernel-firmwareUpgrade kernel-firmware-qcomUpgrade kernel-firmware-nfpUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-realtekUpgrade kernel-firmware-radeonUpgrade kernel-firmware-marvellUpgrade kernel-firmware-soundUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-platformUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-bluetoothUpgrade kernel-firmware-mediaUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-presteraUpgrade kernel-firmware-tiUpgrade kernel-firmware-intelUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-serial | Aug 15, 2024 | Aug 12, 2024 |
| Ubuntu | — | Upgrade amd64-microcodeUpgrade amd64-microcode (Ubuntu Pro) | Oct 23, 2024 | Aug 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub