AMI AptioV BIOS (memory buffer restriction failure): Local privilege escalation and potentially arbitrary code

Impact

Local privilege escalation and potentially arbitrary code execution in firmware.

Who can reach it

Local low-privilege access.

What to do

AMI ships the fix to OEMs, not to you - obtain the updated BIOS from your board/server vendor (Supermicro, Gigabyte, ASRock Rack, Quanta, Tyan etc.) and flash it. Expect a lag of weeks to months between the AMI advisory and an OEM image for your exact SKU, and expect some SKUs never to get one. Cold reboot per node.

References

Related entries

• Linux kernel (drivers/infiniband/hw/hns): The completion-queue refcount is not held under a lock, so a CQ asynchronousCVE-2024-38545 · Linux kernel (drivers/infiniband/hw/hns)High
• Linux kernel (drivers/net/ethernet/mellanox/mlx5/core): A command that waits on the busy command-queue semaphore startsCVE-2024-38556 · Linux kernel (drivers/net/ethernet/mellanox/mlx5/core)High
• ASPEED USB device controller driver (drivers/usb/gadget/udc/aspeed_udc.c): The BMC presents itself to the host over USBCVE-2024-46836 · ASPEED USB device controller driver (drivers/usb/gadget/udc/aspeed_udc.c)High
• Dell SmartFabric OS10 (execution with unnecessary privileges): Low-privileged local attacker reaches command executionCVE-2024-48837 · Dell SmartFabric OS10 (execution with unnecessary privileges)High
• Dell SmartFabric OS10 (command injection): Command injection from a low-privileged local account leading to codeCVE-2024-49557 · Dell SmartFabric OS10 (command injection)High
• Dell SmartFabric OS10 (improper privilege management): A low-privileged local attacker elevates privileges on the switchCVE-2024-49558 · Dell SmartFabric OS10 (improper privilege management)High