NetSight
medium5.6

CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that us…

Impact

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

Affected products

VendorProductAffected versions
AmdAthlon 3050ge Firmware
All versions
AmdAthlon 3150g Firmware
All versions
AmdAthlon 3150ge Firmware
All versions
AmdEpyc 7001 Firmware
All versions
AmdEpyc 7002 Firmware
All versions
AmdEpyc 7003 Firmware
All versions
AmdEpyc 7232p Firmware
All versions
AmdEpyc 7251 Firmware
All versions
AmdEpyc 7252 Firmware
All versions
AmdEpyc 7261 Firmware
All versions
AmdEpyc 7262 Firmware
All versions
AmdEpyc 7272 Firmware
All versions

Weakness classification

References