Medium severity · published Aug 9, 2022
CVE-2021-46778
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous…
5.6
CVSS
0.2%
EPSS
No
On KEV
Description
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
AMD Processors · AMD
Processor Some AMD Processors · source: vendor
A3
Athlon 3050ge Firmware · Amd
All versions, or not specified · source: NVD
A3
Athlon 3150g Firmware · Amd
All versions, or not specified · source: NVD
A3
Athlon 3150ge Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7001 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7002 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7003 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7232p Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7251 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7252 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7261 Firmware · Amd
All versions, or not specified · source: NVD
E7
Epyc 7262 Firmware · Amd
All versions, or not specified · source: NVD