NetSight
high8.1

CVE-2023-20571

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in p…

Impact

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.

Affected products

VendorProductAffected versions
AmdRyzen 3 5100 Firmware
before comboam4v2_1.2.0.b
AmdRyzen 3 5300g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 3 5300ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 5500 Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 5600g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 5600ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 7 5700 Firmware
before comboam4v2_1.2.0.b
AmdRyzen 7 5700g Firmware
before comboam4v2_1.2.0.b
AmdRyzen 7 5700ge Firmware
before comboam4v2_1.2.0.b
AmdRyzen 5 7500f Firmware
before comboam5_1.0.7.0
AmdRyzen 5 7600 Firmware
before comboam5_1.0.7.0
AmdRyzen 5 7600x Firmware
before comboam5_1.0.7.0

Weakness classification

References