Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade iwl105-firmwareUpgrade linux-firmwareUpgrade iwl2030-firmwareUpgrade iwl6000-firmwareUpgrade iwl5150-firmwareUpgrade iwl3945-firmwareUpgrade iwl1000-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl3160-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl100-firmwareUpgrade iwl7260-firmwareUpgrade iwl6050-firmwareUpgrade iwl5000-firmwareUpgrade iwl4965-firmwareUpgrade iwl2000-firmwareUpgrade iwl135-firmware | Aug 21, 2024 | Aug 12, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 12, 2024 |
| Dell Poweredge Dsa2024344 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 9, 2024 |
| Freebsd | — | Upgrade cpu-microcode-amd | Dec 10, 2025 | Aug 10, 2024 |
| Oracle_linux | — | Upgrade iwl7260-firmwareUpgrade iwl2000-firmwareUpgrade linux-firmware-whenceUpgrade iwl135-firmwareUpgrade iwl2030-firmwareUpgrade libertas-sd8686-firmwareUpgrade iwl3945-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwlax2xx-firmwareUpgrade iwl3160-firmwareUpgrade iwl6000g2b-firmwareUpgrade netronome-firmwareUpgrade iwl4965-firmwareUpgrade linux-firmwareUpgrade iwl105-firmwareUpgrade iwl100-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl6000-firmwareUpgrade iwl5000-firmwareUpgrade linux-firmware-coreUpgrade liquidio-firmwareUpgrade iwl1000-firmwareUpgrade libertas-usb8388-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl5150-firmwareUpgrade iwl6050-firmware | Aug 16, 2024 | Aug 9, 2024 |
| Redhat_linux | — | Upgrade iwl5000-firmwareNo solution existsUpgrade iwl6000-firmwareUpgrade iwl6000g2b-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl2000-firmwareUpgrade iwl135-firmwareUpgrade iwl105-firmwareUpgrade iwl7260-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl1000-firmwareUpgrade iwl4965-firmwareUpgrade iwl6050-firmwareUpgrade iwl3945-firmwareUpgrade iwl3160-firmwareUpgrade libertas-sd8686-firmwareUpgrade libertas-usb8388-firmwareUpgrade linux-firmwareUpgrade iwl5150-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl2030-firmwareUpgrade iwl100-firmware | Oct 7, 2024 | Aug 12, 2024 |
| Suse | — | Upgrade kernel-firmware-platformUpgrade kernel-firmware-presteraUpgrade kernel-firmware-tiUpgrade kernel-firmware-soundUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-realtekUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-intelUpgrade kernel-firmware-serialUpgrade kernel-firmware-radeonUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-marvellUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-mediaUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-nfpUpgrade kernel-firmware-i915Upgrade kernel-firmware-brcmUpgrade kernel-firmware-qlogicUpgrade kernel-firmwareUpgrade kernel-firmware-qcomUpgrade kernel-firmware-networkUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-allUpgrade kernel-firmware-chelsioUpgrade ucode-amdUpgrade kernel-firmware-atheros | Aug 15, 2024 | Aug 12, 2024 |
| Ubuntu | — | Upgrade amd64-microcode (Ubuntu Pro)Upgrade amd64-microcode | Oct 23, 2024 | Aug 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub