CVE-2017-7262

MEDIUM

AMD Ryzen < 2017-01-27 - Denial of Service via FMA3 Instruction Sequence

Title source: llm
STIX 2.1

Description

The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97098
Third Party Advisory x_refsource_misc
https://news.ycombinator.com/item?id=13924192
Third Party Advisory x_refsource_misc
http://forum.hwbot.org/showthread.php?t=167605
Third Party Advisory x_refsource_misc
http://forum.hwbot.org/showpost.php?p=480524

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 18.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (1)
amd/ryzen < 2017-01-27
Published Mar 25, 2017
Tracked Since Feb 18, 2026