CVE-2021-26401

MEDIUM

AMD Athlon X4 and Ryzen Threadripper Firmware - Insufficient Spectre V2 Mitigation

Title source: llm

LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.

Core 2

Core References

Vendor Advisory x_refsource_misc

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

CVSS v3 5.6

EPSS 0.0013

EPSS Percentile 32.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Status published

Products (50)

amd/a10-9600p_firmware

amd/a10-9630p_firmware

amd/a12-9700p_firmware

amd/a12-9730p_firmware

amd/a4-9120_firmware

amd/a6-9210_firmware

amd/a6-9220_firmware

amd/a6-9220c_firmware

amd/a9-9410_firmware

amd/a9-9420_firmware

... and 40 more

Published Mar 11, 2022

Tracked Since Feb 18, 2026