Local Privilege Escalation Vulnerability in Gigabyte Firmware

CVE-2025-7026

What is CVE-2025-7026?

A security issue in the Software SMI handler can enable local attackers to manipulate the RBX register, leading to unauthorized writes to System Management RAM. When specific values are matched, this vulnerability can allow escalation to System Management Mode, resulting in persistent risks to firmware integrity. Users are urged to patch their systems to safeguard against potential exploitation.

References