CVE-2022-23829: AMD 1st Gen AMD Epyc Processors

High severity, CVSS 8.2. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode (SMM) ROM protections.

Affected products

• AMD 1st Gen AMD Epyc Processors
• AMD 2nd Gen AMD Epyc Processors
• AMD 3rd Gen AMD Epyc Processors
• AMD AMD Athlon 3000 Series Mobile Processors With Radeon Graphics
• AMD AMD Epyc Embedded 3000
• AMD AMD Epyc Embedded 7003
• AMD AMD Epyc TM Embedded 7002
• AMD AMD Ryzen 3000 Series Desktop Processors
• AMD AMD Ryzen 3000 Series Mobile Processor / 2nd Gen AMD Ryzen Mobile Processor With Radeon Graphics
• AMD AMD Ryzen 4000 Series Desktop Processors With Radeon Graphics
• AMD AMD Ryzen 4000 Series Mobile Processors
• AMD AMD Ryzen 5000 Series Desktop Processors
• AMD AMD Ryzen 5000 Series Mobile Processors
• AMD AMD Ryzen 5000 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 6000 Series Mobile Processors And Workstations
• AMD AMD Ryzen 7000 Series Desktop Processors
• AMD AMD Ryzen Threadripper Pro Processor
• AMD AMD Ryzen Threadripper Pro Processors 5900 Wx-Series
• AMD AMD Ryzentm Embedded 5000
• AMD AMD Ryzentm Embedded r1000
• AMD AMD Ryzentm Embedded r2000
• AMD AMD Ryzentm Embedded v1000
• AMD AMD Ryzentm Embedded v2000
• AMD AMD Ryzentm Embedded v3000
• AMD Ryzen 6980hx: any version
• and 1 more

Published 2024-06-18. Last modified 2026-06-17.