CVE-2021-26378

MEDIUM

AMD EPYC 7002 Series Firmware < romepi-sp3_1.0.0.d - Denial of Service via SMU Memory Access

Title source: llm
STIX 2.1

Description

Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.

References (2)

Core 2

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 12.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (50)
amd/epyc_7232p_firmware < romepi-sp3_1.0.0.d
amd/epyc_7252_firmware < romepi-sp3_1.0.0.d
amd/epyc_7262_firmware < romepi-sp3_1.0.0.d
amd/epyc_7272_firmware < romepi-sp3_1.0.0.d
amd/epyc_7282_firmware < romepi-sp3_1.0.0.d
amd/epyc_72f3_firmware < milanpi-sp3_1.0.0.7
amd/epyc_7302_firmware < romepi-sp3_1.0.0.d
amd/epyc_7302p_firmware < romepi-sp3_1.0.0.d
amd/epyc_7313p_firmware < milanpi-sp3_1.0.0.7
amd/epyc_7343_firmware < milanpi-sp3_1.0.0.7
... and 40 more
Published May 11, 2022
Tracked Since Feb 18, 2026