Summary
Enrique Nissim and Krzysztof Okupski discovered that some AMD processors
did not properly restrict access to the System Management Mode (SMM)
configuration when the SMM Lock was enabled. A privileged local attacker
could possibly use this issue to further escalate their privileges and
execute arbitrary code within the processor's firmware layer.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | amd64-microcode | 3.20191218.1ubuntu1.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | amd64-microcode | 3.20191218.1ubuntu2.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | amd64-microcode | 3.20231019.1ubuntu2.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | amd64-microcode | 3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | amd64-microcode | 3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3 |
Vulnerabilities 1
-
High 7.5
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM …
References
-
report
https://ubuntu.com/security/CVE-2023-31315