Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.
History

Fri, 27 Jun 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Wed, 28 May 2025 14:30:00 +0000

Type Values Removed Values Added
References

Thu, 22 May 2025 03:00:00 +0000


Wed, 26 Feb 2025 01:45:00 +0000

Type Values Removed Values Added
Title kernel: hw:amd: AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM
References
Metrics threat_severity

None

threat_severity

Important


Tue, 11 Feb 2025 20:45:00 +0000

Type Values Removed Values Added
Description Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution.
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2025-02-11T20:39:03.746Z

Updated: 2025-06-27T21:55:43.707Z

Reserved: 2024-01-03T16:43:09.232Z

Link: CVE-2024-21925

cve-icon Vulnrichment

Updated: 2025-02-12T15:35:31.119Z

cve-icon NVD

Status : Received

Published: 2025-02-11T21:15:12.577

Modified: 2025-02-11T21:15:12.577

Link: CVE-2024-21925

cve-icon Redhat

Severity : Important

Publid Date: 2025-02-11T10:00:00Z

Links: CVE-2024-21925 - Bugzilla