CVE-2022-29277: AMD Genoa Firmware

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060

Affected products

• AMD Genoa Firmware: before 05.52.25.0006 (fixed in 05.52.25.0006)
• AMD Hygon 1 Firmware: before 05.36.26.0016 (fixed in 05.36.26.0016)
• AMD Hygon 2 Firmware: before 05.36.26.0016 (fixed in 05.36.26.0016)
• AMD Hygon 3 Firmware: before 05.44.26.0007 (fixed in 05.44.26.0007)
• AMD Milan Firmware: before 05.36.10.0017 (fixed in 05.36.10.0017); before 05.36.26.0016 (fixed in 05.36.26.0016)
• AMD Rome Firmware: before 05.36.10.0017 (fixed in 05.36.10.0017); before 05.36.26.0016 (fixed in 05.36.26.0016)
• AMD Ryzen 5300g Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5300ge Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5600g Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5600ge Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5600x Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5700g Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5700ge Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5800x3d Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5800x Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5900x Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Ryzen 5950x Firmware: before 05.44.30.0004 (fixed in 05.44.30.0004)
• AMD Snowy Owl r1000 Firmware: before 05.32.50.0018 (fixed in 05.32.50.0018)
• AMD Snowy Owl r2000 Firmware: before 05.44.30.0005 (fixed in 05.44.30.0005)
• AMD Snowy Owl v2000 Firmware: before 05.44.30.0007 (fixed in 05.44.30.0007)
• AMD Snowy Owl v3000 Firmware: before 05.44.30.0007 (fixed in 05.44.30.0007)
• Intel Alder Lake Firmware: before 05.44.23.0047 (fixed in 05.44.23.0047)
• Intel Bakerville Firmware: before 05.21.51.0026 (fixed in 05.21.51.0026)
• Intel Cedar Island Firmware: before 05.42.11.0021 (fixed in 05.42.11.0021)
• Intel Comet Lake-S Firmware: before 05.43.12.0052 (fixed in 05.43.12.0052)
• and 14 more

Published 2022-11-15. Last modified 2026-06-17.