Vulnerability in Amd 2nd Gen Epyc™
CVE-2021-46769
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead to code execution.
EPSS: 0.005 (67.1th percentile) — read the EPSS interpretation.
Affected products
- Amd 2nd Gen Epyc™ — versions various
- Amd 3rd Gen Epyc™ — versions various
References
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001 (vendor-advisory)