AMD Platform Configuration Blob SMM Privilege Escalation Vulnerability

A vulnerability exists in the AMD Platform Configuration Blob (APCB) System Management Mode (SMM) driver due to incorrect use of the LocateProtocol service in the EFI_BOOT_Services table. This flaw could enable a privileged attacker with local access (Ring 0) to escalate privileges to SMM, potentially leading to arbitrary code execution.

Impact

Exploitation of this vulnerability could allow for unauthorized privilege escalation to System Management Mode, with the potential for arbitrary code execution.

Remediation

Users are advised to update to the Platform Initialization (PI) versions specified for their AMD EPYC or Ryzen processors. Consult the AMD security bulletin AMD-SB-7054 for detailed update instructions.