AMD AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo”

• CVE-2023-20571 Unrated A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation. 0.4%
• CVE-2023-20565 Unrated Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. 0.2%
• CVE-2023-20563 High 7.8 Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. 0.2%
• CVE-2022-23821 Unrated Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution. 1.0%
• CVE-2021-46758 Unrated Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availa 0.3%
• CVE-2022-23820 High 7.5 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. 0.7%