AMD EPYC™ Processors
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-26388 | various | Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memo | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26376 | various | Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resou | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26373 | various | Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of reso | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26348 | various | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory i | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26364 | various | Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26349 | various | Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26378 | various | Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial o | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26342 | various | In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includ | LOW 3.3 | 0.2 % | ||
| CVE-2021-26375 | various | Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address spa | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26372 | various | Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could re | MEDIUM 5.5 | 0.2 % | ||
| CVE-2021-26339 | various | A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting i | MEDIUM 5.5 | 0.3 % | ||
| CVE-2021-26350 | various | A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in | MEDIUM 4.7 | 0.1 % | ||
| CVE-2021-26312 | various | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory i | MEDIUM 5.5 | 0.2 % |