AMD Ryzen™ Threadripper™ PRO Processor

• CVE-2023-20558 High 8.8 Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges. 0.7%
• CVE-2023-20559 High 8.8 Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges. 0.7%
• CVE-2022-27672 Unrated When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially resulting in information disclosure. 0.3%