Vulnerability in Amd 2nd Gen Epyc™
CVE-2021-26379
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
EPSS: 0.006 (68.9th percentile) — read the EPSS interpretation.
Affected products
- Amd 2nd Gen Epyc™ — versions various
- Amd 3rd Gen Epyc™ — versions various
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 (vendor-advisory)