What is CVE-2021-46778?

CVE-2021-46778 is a medium-severity vulnerability in Amd Processors, classified under Observable Discrepancy. CVSS score: 5.6/10. Published 2022-08-10.

How severe is CVE-2021-46778?

Medium severity. CVSS v3 base score is 5.6 out of 10.

Is CVE-2021-46778 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Amd Processors

CVE-2021-46778

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.6 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Amd Processors — versions Processor Some AMD Processors
Amd Athlon_3050ge
Amd Athlon_3050ge_firmware
Amd Athlon_3150g
Amd Athlon_3150ge
Amd Athlon_3150ge_firmware
Amd Athlon_3150g_firmware
Amd Epyc_7001
Amd Epyc_7001_firmware
Amd Epyc_7002

Weakness classification (CWE)

CWE-203 — Observable Discrepancy

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

psirt@amd.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-46778?: CVE-2021-46778 is a medium-severity vulnerability in Amd Processors, classified under Observable Discrepancy. CVSS score: 5.6/10. Published 2022-08-10.
How severe is CVE-2021-46778?: Medium severity. CVSS v3 base score is 5.6 out of 10.
Is CVE-2021-46778 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.