Vulnerability Description
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7232P Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7232P | - |
| Amd | Epyc 7302P Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7302P | - |
| Amd | Epyc 7402P Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7402P | - |
| Amd | Epyc 7502P Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7502P | - |
| Amd | Epyc 7702P Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7702P | - |
| Amd | Epyc 7252 Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7252 | - |
| Amd | Epyc 7262 Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7262 | - |
| Amd | Epyc 7272 Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7272 | - |
| Amd | Epyc 7282 Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7282 | - |
| Amd | Epyc 7302 Firmware | < romepi-sp3_1.0.0.d |
| Amd | Epyc 7302 | - |
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028Vendor Advisory
FAQ
What is CVE-2021-26375?
CVE-2021-26375 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
How severe is CVE-2021-26375?
CVE-2021-26375 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-26375?
Check the references section above for vendor advisories and patch information. Affected products include: Amd Epyc 7232P Firmware, Amd Epyc 7232P, Amd Epyc 7302P Firmware, Amd Epyc 7302P, Amd Epyc 7402P Firmware.