critical9.8
CVE-2021-26379
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity a…
Impact
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 72f3 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7313 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7313p Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7343 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7373x Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 73f3 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7413 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7443 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7443p Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7453 Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 7473x Firmware | before milanpi_1.0.0.9 |
| Amd | Epyc 74f3 Firmware | before milanpi_1.0.0.9 |