Authorization

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...

Heap overflow

AMD System Management Unit SMU may experience a heap-based overflow which may result in a loss of resources...

Design/Logic Flaw

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26338

Improper access controls in System Management Unit SMU may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources...

CVE-2021-26312

Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity...

CVE-2021-26338

Improper access controls in System Management Unit SMU may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources...

CVE-2021-26329

AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources...

Improper access control

Improper access controls in System Management Unit SMU may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources...

CVE-2021-26331

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...

CVE-2021-26331

CVE-2021-26331 affects the AMD System Management Unit (SMU). The vulnerability description indicates a malicious user could manipulate mailbox entries to achieve arbitrary code execution. Impact and exploit details are not provided beyond this, but the AMD-SB-1021 bulletin notes mitigations via O...

CVE-2021-26336

CVE-2021-26336 concerns AMD System Management Unit (SMU) with insufficient bounds checking that can cause invalid memory accesses/updates, leading to an SMU hang and the system may fail to service further requests from other components. Multiple sources confirm the issue under the SMU and referen...

CVE-2021-26338

The CVE targets AMD's System Management Unit (SMU) in AMD EPYC processors (1st–3rd Gen) where improper access controls may allow an attacker to override DRAM performance-control tables, risking resource exhaustion. Affected components/versions are stated in AMD’s bulletin AMD-SB-1021 (AGESA mitig...

PT-2021-17014 · Amd · Athlon™ Series +87

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may cause a DMA read from an invalid DRAM address to SRAM. This can result in t...

PT-2021-17015 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to improper access controls in the System Management Unit SMU, which may allow an attacker to override performance control tables located in DRAM. Th...

PT-2021-17011

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The issue allows a malicious user to manipulate mailbox entries, potentially leading to arbitrary code execution. Recommendations At the moment, there is no information...

PT-2021-17010

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience a heap-based overflow, which may result in a loss of resources. Recommendations At the moment, there is no information...

PT-2021-17013 · Unknown · Amd System Management Unit

Name of the Vulnerable Software and Affected Versions: System Management Unit SMU affected versions not specified Description: The issue is related to insufficient bounds checking in the System Management Unit SMU, which may cause invalid memory accesses or updates. This could result in the SMU...

PT-2021-17009

Name of the Vulnerable Software and Affected Versions AMD System Management Unit SMU affected versions not specified Description The AMD System Management Unit SMU may experience an integer overflow when an invalid length is provided, potentially resulting in a loss of resources. Recommendations ...

CVE-2021-26337: Undefined Security Weakness

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...

CVE-2021-26331: Improper Input Validation

AMD System Management Unit SMU contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution...