AMI AptioV BIOS (memory buffer restriction failure): Local privilege escalation and potentially arbitrary code

Impact

Local privilege escalation and potentially arbitrary code execution in firmware.

Who can reach it

Local low-privilege access.

What to do

AMI ships the fix to OEMs, not to you - obtain the updated BIOS from your board/server vendor (Supermicro, Gigabyte, ASRock Rack, Quanta, Tyan etc.) and flash it. Expect a lag of weeks to months between the AMI advisory and an OEM image for your exact SKU, and expect some SKUs never to get one. Cold reboot per node.

References