Lucene search

[email protected]CVE-2021-26336

HistoryMay 10, 2022 - 12:00 a.m.

CVE-2021-26336

2022-05-1000:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2021-26336

system management unit

smu

bounds checking

memory accesses

memory updates

nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components.

Affected configurations

NVD

Node

amdepyc_7003_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7003Match-

Node

amdepyc_7002_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7002Match-

Node

amdepyc_72f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_72f3Match-

Node

amdepyc_7313_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7313Match-

Node

amdepyc_7313p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7313pMatch-

Node

amdepyc_7343_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7343Match-

Node

amdepyc_73f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_73f3Match-

Node

amdepyc_7413_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7413Match-

Node

amdepyc_7443_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7443Match-

Node

amdepyc_7443p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7443pMatch-

Node

amdepyc_7453_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7453Match-

Node

amdepyc_74f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_74f3Match-

Node

amdepyc_7513_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7513Match-

Node

amdepyc_7543_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7543Match-

Node

amdepyc_7543p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7543pMatch-

Node

amdepyc_75f3_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_75f3Match-

Node

amdepyc_7643_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7643Match-

Node

amdepyc_7663_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7663Match-

Node

amdepyc_7713_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7713Match-

Node

amdepyc_7713p_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7713pMatch-

Node

amdepyc_7763_firmwareRange<milanpi-sp3_1.0.0.4

AND

amdepyc_7763Match-

Node

amdepyc_7232p_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7232pMatch-

Node

amdepyc_7252_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7252Match-

Node

amdepyc_7262_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7262Match-

Node

amdepyc_7272_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7272Match-

Node

amdepyc_7282_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7282Match-

Node

amdepyc_7302_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7302Match-

Node

amdepyc_7302p_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7302pMatch-

Node

amdepyc_7352_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7352Match-

Node

amdepyc_7402_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7402Match-

Node

amdepyc_7402p_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7402pMatch-

Node

amdepyc_7452_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7452Match-

Node

amdepyc_7502_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7502Match-

Node

amdepyc_7502p_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7502pMatch-

Node

amdepyc_7532_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7532Match-

Node

amdepyc_7542_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7542Match-

Node

amdepyc_7552_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7552Match-

Node

amdepyc_7642_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7642Match-

Node

amdepyc_7662_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7662Match-

Node

amdepyc_7702_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7702Match-

Node

amdepyc_7702p_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7702pMatch-

Node

amdepyc_7742_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7742Match-

Node

amdepyc_7f32_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7f32Match-

Node

amdepyc_7f52_firmwareRange<romepi-sp3_1.0.0.c

AND

amdepyc_7f52Match-

Node

amdryzen_3_3100_firmwareMatch-

AND

amdryzen_3_3100Match-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600_firmwareMatch-

AND

amdryzen_5_3600Match-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_threadripper_1900x_firmwareMatch-

AND

amdryzen_threadripper_1900xMatch-

Node

amdryzen_threadripper_1920x_firmwareMatch-

AND

amdryzen_threadripper_1920xMatch-

Node

amdryzen_threadripper_1950x_firmwareMatch-

AND

amdryzen_threadripper_1950xMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_3960x_firmwareMatch-

AND

amdryzen_threadripper_3960xMatch-

Node

amdryzen_threadripper_3970x_firmwareMatch-

AND

amdryzen_threadripper_3970xMatch-

Node

amdryzen_threadripper_3990x_firmwareMatch-

AND

amdryzen_threadripper_3990xMatch-

Node

amdryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3945wxMatch-

Node

amdryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3955wxMatch-

Node

amdryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3975wxMatch-

Node

amdryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3995wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5995wxMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_5_3600x_firmwareMatch-

AND

amdryzen_5_3600xMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

CPENameOperatorVersion
amd:epyc_7003_firmwareamd epyc 7003 firmwareltmilanpi-sp3_1.0.0.4

CPE	Name	Operator	Version
amd:epyc_7003_firmware	amd epyc 7003 firmware	lt	milanpi-sp3_1.0.0.4

CNA Affected

[
  {
    "product": "Ryzen™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": " Athlon™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-26336

prion1 cvelist1 nvd1 hp1 amd2