AMD SMM Callout Privilege Escalation Bug Disclosed For APUs

Written by Michael Larabel in AMD on 18 June 2020 at 08:29 AM EDT. 23 Comments
AMD
AMD has made public "SMM Callout Privilege Escalation" or more formally CVE-2020-12890 as an AGESA vulnerability that could lead to arbitrary code execution on APUs.

The SMM Callout Privilege Escalation impacts mobile/embedded AMD APUs that could lead to arbitrary code execution undetected by the operating system. Affected hardware was launched between 2016 and 2019. AMD is shipping updated AGESA to motherboard vendors for mitigating the issue. Updated AGESA should be out for most systems before the end of the month.

More details on the AMD SMM Callout Privilege Escalation bug via AMD product security.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week