VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 16, 2022· Updated Aug 4, 2024

CVE-2021-39298

CVE-2021-39298

Description

A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

Affected products

6
  • Lenovo/System Management Modulellm-fuzzy
  • AMD/2nd Gen EPYCv5
    Range: Various
  • AMD/3rd Gen EPYCv5
    Range: various
  • AMD/Ryzen 2000 Seriesv5
    Range: various
  • AMD/Ryzen 3000 Seriesv5
    Range: Various
  • AMD/Ryzen 5000 Seriesv5
    Range: various

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.