Intel UEFI PdaSmm Module Information Disclosure Vulnerability

A time-of-check time-of-use race condition has been identified in the UEFI PdaSmm module on certain Intel reference platforms. This vulnerability may allow information disclosure. It requires a privileged user and involves a high complexity attack, potentially leading to unauthorized data exposure. The issue can occur through local access, without special internal knowledge, and requires no user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users are advised to update to the latest UEFI firmware version provided by their system manufacturer that addresses this vulnerability.