Race Condition Vulnerability in AMD SMM Communications Buffer
CVE-2024-36311

4.6MEDIUM

Key Information:

Vendor: Amd
Status: Amd Ryzen™ 7045 Series Mobile Processors With Radeon™ Graphics; Amd Ryzen™ 7000 Series Desktop Processors; Amd Ryzen™ 9000hx Series Mobile Processors; Amd Ryzen™ 8000 Series Desktop Processors
Vendor: CVE Published:; 10 February 2026

What is CVE-2024-36311?

A time-of-check time-of-use (TOCTOU) race condition found in the SMM communications buffer of AMD products allows a privileged attacker to exploit input validation mechanisms. This flaw can facilitate out-of-bounds reads or writes, resulting in potential breaches of confidentiality, integrity, or availability. Remediation measures are crucial to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AMD Ryzen™ 7000 Series Desktop Processors ComboAM5PI 1.0.0.b

AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics DragonRangeFL1PI 1.0.0.3h

AMD Ryzen™ 8000 Series Desktop Processors ComboAM5PI 1.1.0.3d

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:

4.6

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Local

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: