CVE-2023-20559

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-02 · updated 2026-06-17
Weakness: CWE-691

Description

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.

Affected products

AMD Athlon Gold 3150U Firmware: all versions
AMD Athlon Silver 3050U Firmware: all versions
AMD Ryzen 3 2200U Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c
AMD Ryzen 3 2300U Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c
AMD Ryzen 3 3200U Firmware: all versions
AMD Ryzen 3 3250U Firmware: all versions
AMD Ryzen 3 3300U Firmware: all versions
AMD Ryzen 3 3300X Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 3350U Firmware: all versions
AMD Ryzen 3 3450U Firmware: all versions
AMD Ryzen 3 3500C Firmware: all versions
AMD Ryzen 3 3500U Firmware: all versions
AMD Ryzen 3 3550H Firmware: all versions
AMD Ryzen 3 3580U Firmware: all versions
AMD Ryzen 3 3700C Firmware: all versions
AMD Ryzen 3 3700U Firmware: all versions
AMD Ryzen 3 3750H Firmware: all versions
AMD Ryzen 3 3780U Firmware: all versions
AMD Ryzen 3 4300G Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 3 4300Ge Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5300G Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5300Ge Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 2500U Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600 Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600H Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c
AMD Ryzen 5 2600X Firmware: before comboam4v2_pi_1.2.0.6c — fixed in comboam4v2_pi_1.2.0.6c

How to fix

Upgrade to a fixed version: AMD Ryzen 3 2200U Firmware comboam4v2_pi_1.2.0.6c; AMD Ryzen 3 2300U Firmware comboam4v2_pi_1.2.0.6c; AMD Ryzen 3 3300X Firmware comboam4_v2_pi_1.2.0.6c; AMD Ryzen 3 4300G Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 3 4300Ge Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5300G Firmware comboam4_v2_pi_1.2.0.6c; AMD Ryzen 3 5300Ge Firmware comboam4_v2_pi_1.2.0.6c; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5425C Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5425U Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 5 2500U Firmware comboam4v2_pi_1.2.0.6c. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20559 or the next vulnerability affects your stack