CVE-2021-26372

MEDIUM

AMD EPYC 7002 Series Firmware < romepi-sp3_1.0.0.d - Denial of Service via SMU PCIE Bound Check Bypass

Title source: llm
STIX 2.1

Description

Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.

References (2)

Core 2

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 12.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (44)
amd/epyc_7232p_firmware < romepi-sp3_1.0.0.d
amd/epyc_7252_firmware < romepi-sp3_1.0.0.d
amd/epyc_7262_firmware < romepi-sp3_1.0.0.d
amd/epyc_7272_firmware < romepi-sp3_1.0.0.d
amd/epyc_7282_firmware < romepi-sp3_1.0.0.d
amd/epyc_72f3_firmware < milanpi-sp3_1.0.0.7
amd/epyc_7302_firmware < romepi-sp3_1.0.0.d
amd/epyc_7302p_firmware < romepi-sp3_1.0.0.d
amd/epyc_7313p_firmware < milanpi-sp3_1.0.0.7
amd/epyc_7343_firmware < milanpi-sp3_1.0.0.7
... and 34 more
Published May 11, 2022
Tracked Since Feb 18, 2026