CVE-2021-26352

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-26352
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:amd:ryzen_5_2600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:amd:ryzen_5_2700x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:amd:ryzen_5_2700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:amd:ryzen_9_5950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_5950x:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_5900x:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:amd:ryzen_7_5800x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5800x:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:amd:ryzen_7_5700g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:amd:ryzen_7_5700ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:amd:ryzen_5_5600g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:amd:ryzen_5_5600ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:amd:ryzen_3_5300g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:amd:ryzen_3_5300ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:*
History

25 May 2022, 17:42

Type Values Removed Values Added
References (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 - Vendor Advisory
CWE CWE-119
First Time Amd ryzen Threadripper Pro 5945wx Firmware
Amd ryzen Threadripper Pro 5955wx
Amd ryzen Threadripper 2990wx Firmware
Amd ryzen 5 2600x Firmware
Amd ryzen 5 2700
Amd ryzen 5 5600ge
Amd ryzen 5 3600 Firmware
Amd ryzen 9 3950x
Amd ryzen Threadripper Pro 5995wx
Amd ryzen Threadripper Pro 5955wx Firmware
Amd ryzen 5 5600x
Amd ryzen 7 5800x
Amd ryzen 5 3600x
Amd ryzen 9 3900x
Amd ryzen 3 5300g
Amd ryzen 9 5950x Firmware
Amd ryzen Threadripper Pro 5975wx Firmware
Amd ryzen 7 3700x
Amd ryzen 9 3950x Firmware
Amd ryzen 7 3700x Firmware
Amd ryzen Threadripper 2950x
Amd ryzen 7 3800x
Amd ryzen 5 2600x
Amd ryzen 5 5600x Firmware
Amd ryzen 9 5950x
Amd
Amd ryzen Threadripper Pro 5945wx
Amd ryzen Threadripper 2950x Firmware
Amd ryzen Threadripper 2970wx
Amd ryzen 5 3600x Firmware
Amd ryzen 5 5600g
Amd ryzen 5 2600
Amd ryzen Threadripper 2970wx Firmware
Amd ryzen 7 5700g Firmware
Amd ryzen Threadripper 2990wx
Amd ryzen 7 5700g
Amd ryzen Threadripper Pro 5965wx Firmware
Amd ryzen 5 2700x Firmware
Amd ryzen Threadripper 3970x
Amd ryzen 5 2700 Firmware
Amd ryzen Threadripper 2920x Firmware
Amd ryzen 5 5600g Firmware
Amd ryzen 5 2700x
Amd ryzen Threadripper Pro 5975wx
Amd ryzen Threadripper 2920x
Amd ryzen 5 3600
Amd ryzen 5 5600ge Firmware
Amd ryzen 9 3900x Firmware
Amd ryzen 3 5300g Firmware
Amd ryzen 7 5700ge Firmware
Amd ryzen Threadripper 3970x Firmware
Amd ryzen 9 5900x
Amd ryzen Threadripper Pro 5965wx
Amd ryzen 7 5800x Firmware
Amd ryzen 3 5300ge Firmware
Amd ryzen 7 5700ge
Amd ryzen 5 2600 Firmware
Amd ryzen 9 5900x Firmware
Amd ryzen 3 5300ge
Amd ryzen 7 3800x Firmware
Amd ryzen Threadripper Pro 5995wx Firmware
CVSS v2 : unknown
v3 : unknown 		v2 : 4.9
v3 : 5.5
CPE cpe:2.3:h:amd:ryzen_9_5950x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_9_3950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_2600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_7_5800x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2600:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_3600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_pro_5975wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5945wx:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_pro_5945wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_7_5700g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_3_5300ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_5600x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_2990wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_2970wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_2920x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5955wx:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_3970x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_3800x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_3600x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_9_5950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600g:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300g:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_2700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_3600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600ge:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_3_5300g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2600x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2700x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_2950x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700g:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_pro_5965wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5995wx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5700ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5965wx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_3_5300ge:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_5800x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2950x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_pro_5995wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_7_5700ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_5600ge_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_3970x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2920x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_9_5900x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_3600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_3900x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_7_3800x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2990wx:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_5600g_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_9_3900x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_3950x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_2970wx:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_2700x_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_5_2600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_2700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_5_5600x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_7_3700x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_threadripper_pro_5975wx:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:ryzen_9_5900x:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_threadripper_pro_5955wx_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:amd:ryzen_7_3700x_firmware:-:*:*:*:*:*:*:*

12 May 2022, 18:16

Type Values Removed Values Added
References
  • {'url': 'https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021', 'name': 'https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021', 'tags': [], 'refsource': 'MISC'}
  • (MISC) https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 -

10 May 2022, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-05-10 19:15

Updated : 2023-12-10 14:22

NVD link : CVE-2021-26352

Mitre link : CVE-2021-26352

CVE.ORG link : CVE-2021-26352

JSON object : View

Products Affected

amd

  • ryzen_7_5700ge
  • ryzen_threadripper_2950x
  • ryzen_threadripper_2920x
  • ryzen_9_3900x
  • ryzen_3_5300ge
  • ryzen_5_2700
  • ryzen_threadripper_2970wx_firmware
  • ryzen_threadripper_2970wx
  • ryzen_threadripper_pro_5975wx_firmware
  • ryzen_5_2600x
  • ryzen_3_5300ge_firmware
  • ryzen_threadripper_2920x_firmware
  • ryzen_7_3700x
  • ryzen_9_5950x_firmware
  • ryzen_5_3600_firmware
  • ryzen_threadripper_3970x_firmware
  • ryzen_threadripper_pro_5945wx_firmware
  • ryzen_5_2700x_firmware
  • ryzen_9_5900x
  • ryzen_9_3950x_firmware
  • ryzen_5_2700x
  • ryzen_threadripper_pro_5945wx
  • ryzen_5_2600x_firmware
  • ryzen_5_3600x
  • ryzen_threadripper_2990wx_firmware
  • ryzen_threadripper_2990wx
  • ryzen_5_2600_firmware
  • ryzen_threadripper_3970x
  • ryzen_5_5600ge_firmware
  • ryzen_5_5600g
  • ryzen_5_5600ge
  • ryzen_7_3800x_firmware
  • ryzen_5_5600g_firmware
  • ryzen_7_3700x_firmware
  • ryzen_threadripper_pro_5995wx_firmware
  • ryzen_5_3600x_firmware
  • ryzen_9_5950x
  • ryzen_3_5300g_firmware
  • ryzen_3_5300g
  • ryzen_5_2600
  • ryzen_threadripper_pro_5975wx
  • ryzen_threadripper_pro_5965wx
  • ryzen_7_5800x
  • ryzen_9_3950x
  • ryzen_7_5700g
  • ryzen_9_3900x_firmware
  • ryzen_7_5800x_firmware
  • ryzen_threadripper_pro_5995wx
  • ryzen_threadripper_pro_5965wx_firmware
  • ryzen_7_5700g_firmware
  • ryzen_5_5600x_firmware
  • ryzen_5_2700_firmware
  • ryzen_5_5600x
  • ryzen_5_3600
  • ryzen_threadripper_pro_5955wx_firmware
  • ryzen_7_5700ge_firmware
  • ryzen_7_3800x
  • ryzen_threadripper_pro_5955wx
  • ryzen_threadripper_2950x_firmware
  • ryzen_9_5900x_firmware
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer