Medium severity5.5NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2021-26372

Description

Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial of service.

Affected products

AMD/Epyc 7642 Firmware3 versions
cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7252 Firmware
cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7262 Firmware
cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7742 Firmware4 versions
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7542 Firmware2 versions
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7302 Firmware2 versions
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7302p Firmware
cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7352 Firmware
cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7402 Firmware
cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7452 Firmware
cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7502 Firmware
cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7f32 Firmware2 versions
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.d
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7662 Firmware
cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7702 Firmware
cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7f52 Firmware
cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/Epyc 7f72 Firmware
cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
Range: <romepi-sp3_1.0.0.d
AMD/System Management Unitllm-fuzzy
osv-coords31 versions
pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 20210208-150300.4.10.1+ 30 more
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
AMD/Athlon™ Seriesv5
Range: various
AMD/AMD processorscpe-rescue
Range: various
AMD/Ryzen™ Seriesv5
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027nvdVendor Advisory
www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000