Privilege Escalation Vulnerability in AMD Secure Processor Kernel
CVE-2020-12931

7.8HIGH

Key Information:

Vendor

Amd
Status
Amd Radeon Rx 5000 Series & Pro W5000 Series
Amd Ryzen(tm) Embedded R1000
Amd Ryzen(tm) Embedded R2000
Amd Ryzen(tm) Embedded 5000
Vendor
CVE Published:
9 November 2022

What is CVE-2020-12931?

The AMD Secure Processor kernel contains an improper parameters handling vulnerability that could be exploited by a privileged attacker. This flaw may allow unauthorized escalation of privileges, potentially compromising system integrity and exposing sensitive information. It is crucial to apply patches and security updates to mitigate associated risks.

Affected Version(s)

AMD Radeon RX 5000 Series & PRO W5000 Series AMD Radeon Software < 22.5.2

AMD Radeon RX 5000 Series & PRO W5000 Series AMD Radeon Pro Software Enterprise < 22.Q2

AMD Radeon RX 5000 Series & PRO W5000 Series Enterprise Driver < 22.10.20

References

https://www.amd.com/en/corporate/product-security/bulleti...
https://www.amd.com/en/corporate/product-security/bulleti...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-12931 : Privilege Escalation Vulnerability in AMD Secure Processor Kernel