May be exposed to CVE-2021-23841, CVE-2021-23839, CVE-2021-23840 #1

sevaksargsyan · 2021-03-10T10:27:29Z

Old OpenSSL is used "edk2/CryptoPkg/Library/OpensslLib/openssl @ e2e09d9", which may expose to vulnerabilities CVE-2021-23841, CVE-2021-23839, CVE-2021-23840.

P.S. Defect is detected by the tool GENES ISP

This patch does not impact functionality. It aims to clarify the synchronization flow between the BSP and APs to enhance code readability and understanding: Steps #6 and #11 are the basic synchronization requirements for all cases. Steps #1 is additional requirements if the MmCpuSyncModeTradition mode is selected. Steps #1, #2, #3, #4, #5, #7, #8, #9, and #10 are additional requirements if the system needs to configure the MTRR. Steps #9 and #10 are additional requirements if the system needs to support the mSmmDebugAgentSupport. Signed-off-by: Jiaxin Wu <[email protected]>

… func This patch is for PiSmmCpuDxeSmm driver to add one round wait/release sync for BSP and AP to perform the SMM CPU Platform Hook before executing MMI Handler: SmmCpuPlatformHookBeforeMmiHandler (). With the function, SMM CPU driver can perform the platform specific items after one round BSP and AP sync (to make sure all APs in SMI) and before the MMI handlers. After the change, steps #1 and #2 are additional requirements if the MmCpuSyncModeTradition mode is selected. Signed-off-by: Jiaxin Wu <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

May be exposed to CVE-2021-23841, CVE-2021-23839, CVE-2021-23840 #1

May be exposed to CVE-2021-23841, CVE-2021-23839, CVE-2021-23840 #1

sevaksargsyan commented Mar 10, 2021

May be exposed to CVE-2021-23841, CVE-2021-23839, CVE-2021-23840 #1

May be exposed to CVE-2021-23841, CVE-2021-23839, CVE-2021-23840 #1

Comments

sevaksargsyan commented Mar 10, 2021