Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade iwl3945-firmwareUpgrade iwl1000-firmwareUpgrade linux-firmwareUpgrade iwl6000-firmwareUpgrade iwl5150-firmwareUpgrade iwl105-firmwareUpgrade iwl2030-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl3160-firmwareUpgrade iwl2000-firmwareUpgrade iwl4965-firmwareUpgrade iwl7260-firmwareUpgrade iwl100-firmwareUpgrade iwl5000-firmwareUpgrade iwl135-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl6050-firmware | Aug 21, 2024 | Aug 12, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 12, 2024 |
| Dell Poweredge Dsa2024344 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 9, 2024 |
| Freebsd | — | Upgrade cpu-microcode-amd | Dec 10, 2025 | Aug 10, 2024 |
| Oracle_linux | — | Upgrade libertas-sd8686-firmwareUpgrade iwl2000-firmwareUpgrade linux-firmware-whenceUpgrade iwl6000g2a-firmwareUpgrade iwl2030-firmwareUpgrade iwl7260-firmwareUpgrade iwl135-firmwareUpgrade iwl3945-firmwareUpgrade linux-firmwareUpgrade linux-firmware-coreUpgrade netronome-firmwareUpgrade iwlax2xx-firmwareUpgrade iwl6050-firmwareUpgrade iwl3160-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl6000-firmwareUpgrade iwl5000-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl1000-firmwareUpgrade liquidio-firmwareUpgrade iwl4965-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl5150-firmwareUpgrade iwl100-firmwareUpgrade iwl105-firmware | Aug 16, 2024 | Aug 9, 2024 |
| Redhat_linux | — | Upgrade iwl100-firmwareUpgrade iwl5150-firmwareUpgrade linux-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl2030-firmwareUpgrade iwl6000g2a-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl4965-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl5000-firmwareUpgrade iwl6000-firmwareUpgrade iwl135-firmwareUpgrade iwl7260-firmwareUpgrade iwl105-firmwareNo solution existsUpgrade iwl6050-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl3945-firmwareUpgrade iwl1000-firmwareUpgrade iwl3160-firmwareUpgrade iwl2000-firmware | Oct 7, 2024 | Aug 12, 2024 |
| Suse | — | Upgrade kernel-firmware-qcomUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-allUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-chelsioUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-brcmUpgrade kernel-firmware-networkUpgrade kernel-firmware-i915Upgrade ucode-amdUpgrade kernel-firmware-atherosUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-nfpUpgrade kernel-firmware-ath10kUpgrade kernel-firmwareUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-platformUpgrade kernel-firmware-radeonUpgrade kernel-firmware-serialUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-marvellUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-realtekUpgrade kernel-firmware-presteraUpgrade kernel-firmware-mediaUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-bluetoothUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-tiUpgrade kernel-firmware-intelUpgrade kernel-firmware-sound | Aug 15, 2024 | Aug 12, 2024 |
| Ubuntu | — | Upgrade amd64-microcodeUpgrade amd64-microcode (Ubuntu Pro) | Oct 23, 2024 | Aug 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub