NetSight
high7.8

CVE-2021-26331

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code executio…

Impact

AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7002 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 7001 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 72f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7343 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 73f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7413 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.4

Weakness classification

References