CVE-2023-20571

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-14 · updated 2026-06-17
Weakness: CWE-362

Description

A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.

Affected products

AMD Ryzen 3 5100 Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 3 5300G Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 3 5300Ge Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 3 7335U Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 3 Pro 7330U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 3 Pro 7440U Firmware: before phoenixpi-fp8-fp7_pi_1.0.0.1g — fixed in phoenixpi-fp8-fp7_pi_1.0.0.1g
AMD Ryzen 5 5500 Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 5 5500H Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 5560U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 5600G Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 5 5600Ge Firmware: before comboam4v2_1.2.0.b — fixed in comboam4v2_1.2.0.b
AMD Ryzen 5 5600H Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 5600Hs Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 5600U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 5625U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 6600H Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 5 6600Hs Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 5 6600U Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 5 7500F Firmware: before comboam5_1.0.7.0 — fixed in comboam5_1.0.7.0
AMD Ryzen 5 7535Hs Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 5 7535U Firmware: before rembrandtpi-fp7_1.0.0.9 — fixed in rembrandtpi-fp7_1.0.0.9
AMD Ryzen 5 7600 Firmware: before comboam5_1.0.7.0 — fixed in comboam5_1.0.7.0
AMD Ryzen 5 7600X Firmware: before comboam5_1.0.7.0 — fixed in comboam5_1.0.7.0
AMD Ryzen 5 Pro 7530U Firmware: before cezannepi-fp6_1.0.0.f — fixed in cezannepi-fp6_1.0.0.f
AMD Ryzen 5 Pro 7540U Firmware: before phoenixpi-fp8-fp7_pi_1.0.0.1g — fixed in phoenixpi-fp8-fp7_pi_1.0.0.1g
AMD Ryzen 5 Pro 7545U Firmware: before phoenixpi-fp8-fp7_pi_1.0.0.1g — fixed in phoenixpi-fp8-fp7_pi_1.0.0.1g
AMD Ryzen 5 Pro 7640H Firmware: before phoenixpi-fp8-fp7_pi_1.0.0.1g — fixed in phoenixpi-fp8-fp7_pi_1.0.0.1g

How to fix

Upgrade to a fixed version: AMD Ryzen 3 5100 Firmware comboam4v2_1.2.0.b; AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.0.f; AMD Ryzen 3 5300G Firmware comboam4v2_1.2.0.b; AMD Ryzen 3 5300Ge Firmware comboam4v2_1.2.0.b; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.0.f; AMD Ryzen 3 5425U Firmware cezannepi-fp6_1.0.0.f; AMD Ryzen 3 7335U Firmware rembrandtpi-fp7_1.0.0.9; AMD Ryzen 3 Pro 7330U Firmware cezannepi-fp6_1.0.0.f; AMD Ryzen 3 Pro 7440U Firmware phoenixpi-fp8-fp7_pi_1.0.0.1g; AMD Ryzen 5 5500 Firmware comboam4v2_1.2.0.b; AMD Ryzen 5 5500H Firmware cezannepi-fp6_1.0.0.f; AMD Ryzen 5 5560U Firmware cezannepi-fp6_1.0.0.f. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-20571 or the next vulnerability affects your stack