Vulnerabilities in AMD CPU allow for code execution at the SMM level.
AMD has announced the resolution of six vulnerabilities in its AMD EPYC and AMD Ryzen processors. The three most critical vulnerabilities (CVE-2023-31342, CVE-2023-31343, CVE-2023-31345) potentially allow for custom code execution at the System Management Mode (SMM), which has a higher priority than hypervisor mode and ring zero protection. Compromising SMM grants unrestricted access to all system memory and can […]
