AMD Processors System Management Mode Memory Overwrite Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in various AMD processors, including Ryzen and Athlon mobile and desktop series, as well as EPYC embedded series processors. This vulnerability arises from improper input validation in the system management mode (SMM), which could enable a privileged attacker to overwrite arbitrary memory. Such an action may lead to arbitrary code execution at the SMM level.

Impact

Exploitation of this vulnerability could result in unauthorized memory modification, allowing for arbitrary code execution within the system management mode, a highly privileged execution environment.

Remediation

Users are advised to update to the latest Platform Initialization (PI) firmware version. Specific update instructions can be obtained from the original equipment manufacturer (OEM).