Amd Epyc 8024p Firmware vulnerabilities

• amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +68 more +70 more Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform... CVE-2023-20591 6.5 MediumAugust 13, 2024
• amd epyc™ 7003 processors, epyc™ 9004 processors, epyc 7203 firmware +64 more +66 more IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs),... CVE-2023-20584 Fix available 5.3 MediumAugust 13, 2024
• amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 more A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and... CVE-2023-20578 7.5 HighAugust 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2024-21980 Public exploit 7.9 HighAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +89 more +91 more Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite... CVE-2024-21978 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +87 more +89 more Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to... CVE-2023-31355 Public exploit 6.0 MediumAugust 5, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause... CVE-2023-31347 4.9 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +61 more +63 more Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data... CVE-2023-31346 Public exploitFix available 6.0 MediumFebruary 13, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc 7203 firmware +64 more +66 more Debug Exception Delivery in Secure Nested Paging CVE-2023-20573 Public exploit 3.2 LowJanuary 11, 2024
• amd 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors, epyc™ embedded 7003 +66 more +68 more Improper address validation in ASP with SNP enabled may potentially allow an attacker to... CVE-2023-20566 5.3 MediumNovember 14, 2023
• amd 3rd gen amd epyc™ processors, 4th gen amd epy™ processors, epyc™ embedded 7003 +65 more +67 more SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential... CVE-2022-23830 1.9 LowNovember 14, 2023
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +92 more +94 more Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB... CVE-2021-26345 1.9 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023