This vulnerability arises from improper handling of boot services within the APCB SMM driver on AMD EPYC™ 9004 Series Processors. A privileged attacker with local kernel-level access (Ring 0) could exploit this flaw to escalate privileges further, potentially executing arbitrary code. The issue is classified as CWE-668, which involves exposure of resources to an unintended security domain. The CVSS 4.0 base score is 7.1, reflecting high severity with local attack vector, high attack complexity, and requiring high privileges. No patch or official remediation level has been disclosed by AMD, and no exploits are currently known.

If exploited, this vulnerability could allow a local attacker with existing high privileges to escalate their privileges further, potentially leading to arbitrary code execution at a higher privilege level. This could compromise system integrity and security on affected AMD EPYC™ 9004 Series processors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published by AMD, organizations should monitor AMD's advisories for updates. Until a patch is available, restricting local privileged access and minimizing exposure to untrusted users may reduce risk.