Description
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
Vendor Advisory vendor-advisory
https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
Scores
CVSS v3
6.1
EPSS
0.0005
EPSS Percentile
15.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:H
Details
Status
published
Products (50)
amd/epyc_7203_firmware
< milanpi_1.0.0.5
amd/epyc_7203p_firmware
< milanpi_1.0.0.5
amd/epyc_7232p_firmware
< romepi_1.0.0.d
amd/epyc_7252_firmware
< romepi_1.0.0.d
amd/epyc_7262_firmware
< romepi_1.0.0.d
amd/epyc_7272_firmware
< romepi_1.0.0.d
amd/epyc_7282_firmware
< romepi_1.0.0.d
amd/epyc_72f3_firmware
< milanpi_1.0.0.5
amd/epyc_7302_firmware
< romepi_1.0.0.d
amd/epyc_7302p_firmware
< romepi_1.0.0.d
... and 40 more
Published
Nov 14, 2023
Tracked Since
Feb 18, 2026