High WID-SEC-2025-0314 13 CVEs

AMD Prozessoren: Mehrere Schwachstellen

Published Feb 11, 2025 · Updated Jun 9, 2025 · Revision 4 · de-DE

Vendor: AMD Vendor: Dell Vendor: HP Vendor: HPE Vendor: IBM Vendor: Lenovo Vendor: Ubuntu Product: BIOS Product: BIOS Product: Computer Product: Computer Product: Computer Product: Linux Product: Power Hardware Management Console Product: PowerEdge Product: ProLiant Product: Prozessor

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in verschiedenen AMD Prozessoren ausnutzen, um beliebigen Code auszuführen, eine Denial-of-Service-Situation zu erzeugen und Informationen offenzulegen oder zu manipulieren.

Product

Prozessoren sind die zentralen Rechenwerke eines Computers.

Vulnerabilities 13

High 8.2

CVE-2024-0179

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to over…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
High 8.2

CVE-2024-21924

SMM callout vulnerability within the AmdPlatformRasSspSmm driver could allow a ring 0 attacker to modify boot services …

AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors

Feb 11, 2025
High 8.2

CVE-2024-21925

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
High 7.5

CVE-2023-31342

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
High 7.5

CVE-2023-31343

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
High 7.5

CVE-2023-31345

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
Medium 6.0

CVE-2023-31352

A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in lo…

AMD AMD EPYC™ 9004 Processors AMD EPYC™ Embedded 9004

Feb 11, 2025
Medium 5.7

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Feb 11, 2025
Medium 5.3

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page tabl…

AMD AMD EPYC™ 9004 Processors AMD EPYC™ Embedded 9004

Feb 11, 2025
Medium 4.4

CVE-2023-31356

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pot…

AMD AMD EPYC™ Embedded 7003 AMD EPYC™ 9004 Processors AMD EPYC™ Embedded 9004 Debian Ubuntu

Aug 13, 2024
Low 3.0

CVE-2023-31331

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializatio…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7000 Series Desktop Processors AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics

Feb 11, 2025
Low 2.5

CVE-2023-20581

Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a los…

AMD AMD EPYC™ 9004 Processors AMD EPYC™ Embedded 9004

Feb 11, 2025
Low 2.3

CVE-2023-20507

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulti…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics AMD Ryzen™ 7000 Series Desktop Processors

Feb 11, 2025

Revision history

2025-06-09 #4
Neue Updates von Ubuntu aufgenommen
2025-05-07 #3
Neue Updates von HP aufgenommen
2025-02-18 #2
Neue Updates von IBM und IBM-APAR aufgenommen
2025-02-11 #1
Initiale Fassung

References

AMD Security Bulletin AMD-SB-3009 vom 2025-02-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3009.html
AMD Security Bulletin AMD-SB-4008 vom 2025-02-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4008.html
AMD Security Bulletin AMD-SB-5004 vom 2025-02-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
AMD Security Bulletin AMD-SB-7027 vom 2025-02-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7027.html
AMD Security Bulletin AMD-SB-7028 vom 2025-02-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7028.html
HP Security Bulletin HPSBHF04004 vom 2025-01-29
https://support.hp.com/de-de/document/ish_11947159-11947218-16/HPSBHF04004
Dell Security Advisory DSA-2025-017 vom 2025-02-11
https://www.dell.com/support/kbdoc/de-de/000250133/dsa-2025-017
HPE Security Bulletin HPESBHF04786 vom 2025-02-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04786en_us&docLocale=en_US
HPE Security Bulletin HPESBHF04782 vom 2025-02-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04782en_us&docLocale=en_US
Lenovo Security Advisory LEN-186850 vom 2025-02-12
https://support.lenovo.com/us/en/product_security/LEN-186850
HPE Security Bulletin HPESBHF04795 vom 2025-02-11
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04795en_us&docLocale=en_US
Dell Security Advisory DSA-2025-085 vom 2025-02-11
https://www.dell.com/support/kbdoc/de-de/000283888/dsa-2025-085-security-update-for-dell-amd-based-poweredge-server-and-gpu-vulnerabilities
IBM Security Bulletin 7183573 vom 2025-02-18
https://www.ibm.com/support/pages/node/7183573
HP Security Bulletin HPSBHF04016 vom 2025-04-11
https://support.hp.com/de-de/document/ish_12440840-12440862-16/HPSBHF04016
Ubuntu Security Notice USN-7561-1 vom 2025-06-09
https://ubuntu.com/security/notices/USN-7561-1