AMD Processors TOCTOU Race Condition Vulnerability Allowing Out-of-Bounds Memory Access

A TOCTOU race condition has been identified in the System Management Mode (SMM) communications buffer of AMD processors. This vulnerability could allow a privileged attacker to bypass input validation and execute out-of-bounds read or write operations. Such actions may lead to unauthorized memory access, with potential consequences for the confidentiality, integrity, or availability of the system.

Impact

Exploitation of this vulnerability could result in unauthorized memory access, allowing for out-of-bounds read or write operations. Such actions could disrupt normal system functions or compromise sensitive data.

Remediation

Users are advised to update to the Platform Initialization (PI) version 1.0.1.2c or later. For specific update instructions, please contact the original equipment manufacturer (OEM).