High severity7.8NVD Advisory· Published Nov 16, 2021· Updated Jun 17, 2026
CVE-2021-26331
CVE-2021-26331
Description
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.
Affected products
63cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- AMD/1st Gen AMD EPYC™v5Range: unspecified
- AMD/2nd Gen AMD EPYC™v5Range: unspecified
- AMD/3rd Gen AMD EPYC™v5Range: unspecified
Patches
Vulnerability mechanics
References
1- www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021nvdVendor Advisory
News mentions
0No linked articles in our index yet.