CVEvulnerability
CVE-2021-26339
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-05-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
Description
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.
Affected configurations
• amd epyc 7763 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7713p firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7713 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7663 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7643 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 75f3 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7543p firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7543 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7513 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7453 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 74f3 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7443p firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7443 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7413 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 73f3 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7343 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7313p firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7313 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 72f3 firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7773x firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7473x firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7573x firmware (< milanpi-sp3 1.0.0.7)
• amd epyc 7373x firmware (< milanpi-sp3 1.0.0.7)
• amd ryzen 7 5700g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 5700ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 5700g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 5700ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 5300g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 5300ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 4700g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 7 4700ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 4600g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 5 4600ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 4300g firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen 3 4300ge firmware (< comboam4 v2 pi 1.2.0.6c)
• amd ryzen threadripper pro 3945wx firmware
• amd ryzen threadripper pro 3955wx firmware
• amd ryzen threadripper pro 3975wx firmware
• amd ryzen threadripper pro 3995wx firmware
• amd ryzen threadripper pro 5945wx firmware
• amd ryzen threadripper pro 5955wx firmware
• amd ryzen threadripper pro 5965wx firmware
• amd ryzen threadripper pro 5975wx firmware
• amd ryzen threadripper pro 5995wx firmware
• amd ryzen 3 2200u firmware
• amd ryzen 3 2300u firmware
• amd ryzen 3 pro 2300u firmware
• amd ryzen 5 2500u firmware
• amd ryzen 5 pro 2500u firmware
• amd ryzen 5 2600h firmware
• amd ryzen 7 2700u firmware
• amd ryzen 7 pro 2700u firmware
• amd ryzen 7 2800h firmware
• amd ryzen 3 3300g firmware
• amd ryzen 3 3300x firmware
• amd ryzen 3 3100 firmware
• amd ryzen 3 pro 3300u firmware
• amd ryzen 5 3400g firmware
• amd ryzen 5 3450g firmware
• amd ryzen 5 3600 firmware
… and 24 more
Related
Referenced by CWE · observed example (1)
- CWE-1281 Sequence of Processor Instructions Leads to Unexpected Behavior weakness
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028 Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027 Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028 Vendor Advisory