SMM CALLOUT VULNERABILITIES IDENTIFIED IN GIGABYTE UEFI FIRMWARE MODULES

Summary from the TLDR InfoSec newsletter

Four SMM callout vulnerabilities (CVE-2025-7026 through CVE-2025-7029) were found in Gigabyte UEFI firmware, allowing attackers with admin privileges to execute code in System Management Mode, bypassing OS protections and potentially disabling Secure Boot and Intel BootGuard. These flaws result from improper validation of CPU registers and pointers in SMI handlers, enabling malicious control over SMRAM writes and flash operations. Although they were previously fixed by AMI, these issues reappeared in Gigabyte's firmware, so users should urgently update to the latest UEFI from Gigabyte's support site.