Medium severity · published May 11, 2022
CVE-2021-26378
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E7
Epyc 7232p Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7252 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7262 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7272 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7282 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 72f3 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7302 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7302p Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7313p Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7343 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7352 Firmware · Amd
before romepi-sp3_1.0.0.d · source: NVD
E7
Epyc 7373x Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26378
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26378
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
More from Epyc 7232p Firmware
9.8
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun potentially leading to arbitrary code…
9.8
CVE-2021-26379
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege…
9.1
CVE-2021-46756
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or…
9.1
CVE-2021-46762
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service
8.8
CVE-2021-46769
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution