A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
History

Wed, 07 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H'}


Tue, 24 Feb 2026 18:00:00 +0000

Type Values Removed Values Added
Description A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware. A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.

cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2022-02-16T16:38:10.726Z

Updated: 2026-10-07T18:03:26.630Z

Reserved: 2021-08-19T00:00:00.000Z

Link: CVE-2021-39298

cve-icon Vulnrichment

Updated: 2024-08-04T02:06:42.610Z

cve-icon NVD

Status : Modified

Published: 2022-02-16T17:15:10.860

Modified: 2026-10-07T19:17:28.783

Link: CVE-2021-39298

cve-icon Redhat

No data.