Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade iwl6050-firmwareUpgrade iwl135-firmwareUpgrade iwl7260-firmwareUpgrade iwl100-firmwareUpgrade iwl5000-firmwareUpgrade iwl4965-firmwareUpgrade iwl2000-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl6000-firmwareUpgrade iwl2030-firmwareUpgrade iwl3945-firmwareUpgrade iwl1000-firmwareUpgrade iwl6000g2a-firmwareUpgrade linux-firmwareUpgrade iwl3160-firmwareUpgrade iwl5150-firmwareUpgrade iwl105-firmware | Aug 21, 2024 | Aug 12, 2024 |
| Debian | — | Upgrade amd64-microcode | Sep 2, 2024 | Aug 12, 2024 |
| Dell Poweredge Dsa2024344 | — | Upgrade Dell PowerEdge to the latest version | Oct 23, 2025 | Aug 9, 2024 |
| Freebsd | — | Upgrade cpu-microcode-amd | Dec 10, 2025 | Aug 10, 2024 |
| Oracle_linux | — | Upgrade netronome-firmwareUpgrade iwl3160-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl4965-firmwareUpgrade linux-firmware-coreUpgrade libertas-sd8787-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl6050-firmwareUpgrade libertas-usb8388-firmwareUpgrade iwlax2xx-firmwareUpgrade linux-firmwareUpgrade iwl100-firmwareUpgrade iwl5000-firmwareUpgrade iwl1000-firmwareUpgrade iwl6000-firmwareUpgrade liquidio-firmwareUpgrade iwl105-firmwareUpgrade iwl5150-firmwareUpgrade iwl6000g2a-firmwareUpgrade iwl7260-firmwareUpgrade linux-firmware-whenceUpgrade libertas-sd8686-firmwareUpgrade iwl2030-firmwareUpgrade iwl3945-firmwareUpgrade iwl135-firmwareUpgrade iwl2000-firmware | Aug 16, 2024 | Aug 9, 2024 |
| Redhat_linux | — | Upgrade iwl7260-firmwareUpgrade libertas-usb8388-olpc-firmwareUpgrade iwl2000-firmwareUpgrade iwl4965-firmwareUpgrade iwl1000-firmwareUpgrade iwl3160-firmwareUpgrade libertas-sd8787-firmwareUpgrade iwl3945-firmwareNo solution existsUpgrade iwl6050-firmwareUpgrade iwl105-firmwareUpgrade iwl5000-firmwareUpgrade iwl135-firmwareUpgrade iwl6000g2b-firmwareUpgrade iwl6000-firmwareUpgrade iwl100-firmwareUpgrade iwl5150-firmwareUpgrade iwl2030-firmwareUpgrade iwl6000g2a-firmwareUpgrade libertas-usb8388-firmwareUpgrade libertas-sd8686-firmwareUpgrade linux-firmware | Oct 7, 2024 | Aug 12, 2024 |
| Suse | — | Upgrade kernel-firmware-qcomUpgrade kernel-firmware-atherosUpgrade kernel-firmware-networkUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-qlogicUpgrade kernel-firmwareUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-allUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-i915Upgrade kernel-firmware-ueagleUpgrade kernel-firmware-brcmUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-nfpUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-ath10kUpgrade ucode-amdUpgrade kernel-firmware-intelUpgrade kernel-firmware-tiUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-radeonUpgrade kernel-firmware-marvellUpgrade kernel-firmware-mediaUpgrade kernel-firmware-realtekUpgrade kernel-firmware-soundUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-platformUpgrade kernel-firmware-presteraUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-serialUpgrade kernel-firmware-mediatek | Aug 15, 2024 | Aug 12, 2024 |
| Ubuntu | — | Upgrade amd64-microcodeUpgrade amd64-microcode (Ubuntu Pro) | Oct 23, 2024 | Aug 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub