This vulnerability arises from improper handling of boot services within the APCB SMM driver on AMD EPYC™ 9004 Series Processors. A privileged attacker with local kernel-level access could exploit this flaw to escalate privileges further, possibly executing arbitrary code. The issue is classified as CWE-668, reflecting exposure of resources to an unintended security domain. The CVSS 4.0 base score is 7.1, indicating high severity with local attack vector, high attack complexity, and no user interaction required. No patch or official remediation level has been disclosed by AMD as of the publication date.

An attacker with existing privileged local access (Ring 0) could exploit this vulnerability to escalate privileges beyond their current level, potentially enabling arbitrary code execution. This could compromise system integrity and security on affected AMD EPYC™ 9004 Series Processors. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the AMD vendor advisory for current remediation guidance. Until an official fix is released, restrict local privileged access to trusted users only and monitor for unusual activity. No official mitigation or temporary fix has been provided by AMD at this time.