Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-20559

No fix known EPSS <1%CVSS 8.8

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

Published 2023-03-23 · CVE record · OSV

Products: AMD Ryzen 2000 Series, AMD Ryzen 3000 Series, AMD Ryzen™ 4000 Series, AMD Ryzen 5000 Series, 2nd Gen AMD Ryzen™ Threadripper™ Processor, 3rd Gen AMD Ryzen™ Threadripper™ Processors, AMD Ryzen™ Threadripper™ PRO Processor