Lucene search

K
cve[email protected]CVE-2021-26378
HistoryMay 11, 2022 - 5:15 p.m.

CVE-2021-26378

2022-05-1117:15:08
CWE-119
web.nvd.nist.gov
64
5
cve-2021-26378
insufficient bound checks
system management unit
smu
denial of service
nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.

Affected configurations

NVD
Node
amdepyc_7232p_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7232pMatch-
Node
amdepyc_7302p_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7302pMatch-
Node
amdepyc_7402p_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7402pMatch-
Node
amdepyc_7502p_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7502pMatch-
Node
amdepyc_7702p_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7702pMatch-
Node
amdepyc_7252_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7252Match-
Node
amdepyc_7262_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7262Match-
Node
amdepyc_7272_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7272Match-
Node
amdepyc_7282_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7282Match-
Node
amdepyc_7302_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7302Match-
Node
amdepyc_7352_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7352Match-
Node
amdepyc_7402_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7402Match-
Node
amdepyc_7452_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7452Match-
Node
amdepyc_7502_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7502Match-
Node
amdepyc_7532_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7532Match-
Node
amdepyc_7542_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7542Match-
Node
amdepyc_7552_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7552Match-
Node
amdepyc_7642_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7642Match-
Node
amdepyc_7662_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7662Match-
Node
amdepyc_7702_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7702Match-
Node
amdepyc_7742_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7742Match-
Node
amdepyc_7f32_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f32Match-
Node
amdepyc_7f52_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f52Match-
Node
amdepyc_7f72_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f72Match-
Node
amdepyc_7f32_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f32Match-
Node
amdepyc_7f52_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f52Match-
Node
amdepyc_7f72_firmwareRange<romepi-sp3_1.0.0.d
AND
amdepyc_7f72Match-
Node
amdepyc_7313p_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7313pMatch-
Node
amdepyc_7443p_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7443pMatch-
Node
amdepyc_7543p_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7543pMatch-
Node
amdepyc_7713p_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7713pMatch-
Node
amdepyc_7773x_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7773xMatch-
Node
amdepyc_7763_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7763Match-
Node
amdepyc_7713_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7713Match-
Node
amdepyc_7663_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7663Match-
Node
amdepyc_7643_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7643Match-
Node
amdepyc_7573x_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7573xMatch-
Node
amdepyc_75f3_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_75f3Match-
Node
amdepyc_7513_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7513Match-
Node
amdepyc_7473x_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7473xMatch-
Node
amdepyc_7453_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7453Match-
Node
amdepyc_74f3_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_74f3Match-
Node
amdepyc_7413_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7413Match-
Node
amdepyc_73f3_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_73f3Match-
Node
amdepyc_7373x_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7373xMatch-
Node
amdepyc_7343_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_7343Match-
Node
amdepyc_72f3_firmwareRange<milanpi-sp3_1.0.0.7
AND
amdepyc_72f3Match-
Node
amdryzen_3_3100_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_3100Match-
Node
amdryzen_3_3100_firmwareRange<comboam4_v2_pi_1.2.0.6c
AND
amdryzen_3_3300Match-
Node
amdryzen_3_3300x_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_3300xMatch-
Node
amdryzen_3_3300x_firmwareRange<comboam4_v2_pi_1.2.0.6c
AND
amdryzen_3_3300xMatch-
Node
amdryzen_9_5950x_firmwareRange<comboam4_v2_pi_1.2.0.6c
AND
amdryzen_9_5950xMatch-
Node
amdryzen_7_5800x3d_firmwareRange<comboam4_v2_pi_1.2.0.6c
AND
amdryzen_7_5800x3dMatch-
Node
amdryzen_9_5900x_firmwareRange<comboam4_v2_pi_1.2.0.6c
AND
amdryzen_9_5900xMatch-
Node
amdryzen_7_5800xMatch-
AND
amdryzen_7_5800x_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_5_5600xMatch-
AND
amdryzen_5_5600x_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_7_5700xMatch-
AND
amdryzen_7_5700x_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_5_5600Match-
AND
amdryzen_5_5600_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_5_5500Match-
AND
amdryzen_5_5500_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_7_5700gMatch-
AND
amdryzen_7_5700g_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_5_5600gMatch-
AND
amdryzen_5_5600g_firmwareRange<comboam4_v2_pi_1.2.0.6c
Node
amdryzen_threadripper_2990wxMatch-
AND
amdryzen_threadripper_2990wx_firmwareRange<summitpi-sp3r2_1.1.0.5
Node
amdryzen_threadripper_2970wxMatch-
AND
amdryzen_threadripper_2970wx_firmwareRange<summitpi-sp3r2_1.1.0.5
Node
amdryzen_threadripper_2950xMatch-
AND
amdryzen_threadripper_2950x_firmwareRange<summitpi-sp3r2_1.1.0.5
Node
amdryzen_threadripper_2920xMatch-
AND
amdryzen_threadripper_2920x_firmwareRange<summitpi-sp3r2_1.1.0.5
Node
amdryzen_threadripper_3990xMatch-
AND
amdryzen_threadripper_3990x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
Node
amdryzen_threadripper_3970x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_3970xMatch-
Node
amdryzen_threadripper_3960x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_3960xMatch-
Node
amdryzen_threadripper_2990wx_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_2990wxMatch-
Node
amdryzen_threadripper_2970wx_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_2970wxMatch-
Node
amdryzen_threadripper_2950x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_2950xMatch-
Node
amdryzen_threadripper_2920x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_2920xMatch-
Node
amdryzen_threadripper_1950x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_1950xMatch-
Node
amdryzen_threadripper_1920x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_1920xMatch-
Node
amdryzen_threadripper_1900x_firmwareRange<castlepeakpi-sp3r3_1.0.0.7
AND
amdryzen_threadripper_1900xMatch-
Node
amdryzen_threadripper_pro_3945wx_firmwareRange<chagallwspi-swrx8_1.0.0.2
AND
amdryzen_threadripper_pro_3945wxMatch-
Node
amdryzen_threadripper_pro_3955wx_firmwareRange<chagallwspi-swrx8_1.0.0.2
AND
amdryzen_threadripper_pro_3955wxMatch-
Node
amdryzen_threadripper_pro_3975wx_firmwareRange<chagallwspi-swrx8_1.0.0.2
AND
amdryzen_threadripper_pro_3975wxMatch-
Node
amdryzen_threadripper_pro_3995wx_firmwareRange<chagallwspi-swrx8_1.0.0.2
AND
amdryzen_threadripper_pro_3995wxMatch-
Node
amdryzen_threadripper_pro_3945wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_3945wxMatch-
Node
amdryzen_threadripper_pro_3955wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_3955wxMatch-
Node
amdryzen_threadripper_pro_3975wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_3975wxMatch-
Node
amdryzen_threadripper_pro_3995wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_3995wxMatch-
Node
amdryzen_threadripper_pro_5945wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_5945wxMatch-
Node
amdryzen_threadripper_pro_5955wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_5955wxMatch-
Node
amdryzen_threadripper_pro_5965wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_5965wxMatch-
Node
amdryzen_threadripper_pro_5975wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_5975wxMatch-
Node
amdryzen_threadripper_pro_5995wx_firmwareRange<castlepeakwspi-swrx8_1.0.0.9
AND
amdryzen_threadripper_pro_5995wxMatch-
Node
amdryzen_3_2200u_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_3_2200uMatch-
Node
amdryzen_3_2300u_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_3_2300uMatch-
Node
amdryzen_5_2500u_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_5_2500uMatch-
Node
amdryzen_5_2600h_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_5_2600hMatch-
Node
amdryzen_7_2700u_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_7_2700uMatch-
Node
amdryzen_7_2800h_firmwareRange<raven-fp5-am4_1.1.0.e
AND
amdryzen_7_2800hMatch-
Node
amdryzen_3_2200u_firmwareRange<pinnaclepi-am4_1.0.0.c_\(rv1\)
AND
amdryzen_3_2200uMatch-
Node
amdryzen_3_2300u_firmwareRange<pinnaclepi-am4_1.0.0.c_\(rv1\)
AND
amdryzen_3_2300uMatch-
Node
amdryzen_5_2500u_firmwareRange<pinnaclepi-am4_1.0.0.c_\(rv1\)
AND
amdryzen_5_2500uMatch-
Node
amdryzen_5_2600h_firmwareRange<pinnaclepi-am4_1.0.0.c_\(rv1\)
AND
amdryzen_5_2600hMatch-
Node
amdryzen_7_2700u_firmwareRange<pinnaclepi-am4_1.0.0.c_\(rv1\)
AND
amdryzen_7_2700uMatch-
Node
amdryzen_7_2800h_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_7_2800hMatch-
Node
amdryzen_3_2200u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_2200uMatch-
Node
amdryzen_3_2300u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_2300uMatch-
Node
amdryzen_5_2500u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_5_2500uMatch-
Node
amdryzen_5_2600h_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_5_2600hMatch-
Node
amdryzen_7_2700u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_7_2700uMatch-
Node
amdryzen_7_2800h_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_7_2800hMatch-
Node
amdryzen_3_2200u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_3_2200uMatch-
Node
amdryzen_3_2300u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_3_2300uMatch-
Node
amdryzen_5_2500u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_5_2500uMatch-
Node
amdryzen_5_2600h_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_5_2600hMatch-
Node
amdryzen_7_2700u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_7_2700uMatch-
Node
amdryzen_7_2800h_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_7_2800hMatch-
Node
amdryzen_3_2200u_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_3_2200uMatch-
Node
amdryzen_3_2300u_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_3_2300uMatch-
Node
amdryzen_5_2500u_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_5_2500uMatch-
Node
amdryzen_5_2600h_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_5_2600hMatch-
Node
amdryzen_7_2700u_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_7_2700uMatch-
Node
amdryzen_7_2800h_firmwareRange<picassopi-fp5_1.0.0.d
AND
amdryzen_7_2800hMatch-
Node
amdryzen_3_3200u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_3200uMatch-
Node
amdryzen_3_3250u_firmwareRange<comboam4pi_1.0.0.8
AND
amdryzen_3_3250uMatch-
Node
amdryzen_3_3200u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_3_3200uMatch-
Node
amdryzen_3_3250u_firmwareRange<comboam4v2_pi_1.2.0.6c
AND
amdryzen_3_3250uMatch-
Node
amdryzen_3_3200u_firmwareRange<renoirpi-fp6_1.0.0.7
AND
amdryzen_3_3200uMatch-
Node
amdryzen_3_3250u_firmwareRange<renoirpi-fp6_1.0.0.7
AND
amdryzen_3_3250uMatch-

CNA Affected

[
  {
    "product": " EPYC™ Processors ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various "
      }
    ]
  },
  {
    "product": "Ryzen™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": " Athlon™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Social References

More

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%