description: A TOCTOU in ASP bootloader may allow an attacker
to tamper with the SPI ROM following data read to memory potentially resulting
in S3 data corruption and information disclosure.
affected:
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ 3000 Series Desktop Processors “Matisse” AM4
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: Ryzen™ Threadripper™ PRO Processors “Chagall” WS
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: 1st Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: 2nd Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
{
defaultStatus: unaffected
packageName: AGESA
platforms: x86
product: 3rd Gen AMD EPYC™ Processors
vendor: AMD
versions:
status: affected, version: various
}
