NetSight
medium5.5

CVE-2021-26337

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing …

Impact

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.

Affected products

VendorProductAffected versions
AmdEpyc 7003 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7002 Firmware
before romepi-sp3_1.0.0.c
AmdEpyc 72f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7313p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7343 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 73f3 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7413 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.4
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.4

References