CVE-2024-21924

No fix known EPSS <1%CVSS 8.2

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services handlers, potentially resulting in arbitrary code execution.

Published 2025-02-11 · CVE record · OSV

Products: AMD EPYC™ 7002 Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD EPYC™ Embedded 7002 Processors