CVE-2021-26339
Medium
Description
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Epyc 7763 Firmware
PublishedMay 11, 2022
First seenMay 11, 2022
How to fix
Update
- amd epyc_7763_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7713p_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7713_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7663_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7643_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_75f3_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7543p_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7543_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7513_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7453_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_74f3_firmwaremilanpi-sp3_1.0.0.7 or later
- amd epyc_7443p_firmwaremilanpi-sp3_1.0.0.7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd epyc_7763_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7713p_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7713_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7663_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7643_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_75f3_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7543p_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7543_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7513_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7453_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_74f3_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7443p_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7443_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7413_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_73f3_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7343_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7313p_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7313_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_72f3_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7773x_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7473x_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7573x_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd epyc_7373x_firmware | v < milanpi-sp3_1.0.0.7 | milanpi-sp3_1.0.0.7 |
| amd ryzen_7_5700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_5700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_4700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_4700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_4600g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_4600ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_4300g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_4300ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_threadripper_pro_3945wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_3955wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_3975wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_3995wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5945wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5955wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5965wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5975wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5995wx_firmware | No range specified | — |
| amd ryzen_3_2200u_firmware | No range specified | — |
| amd ryzen_3_2300u_firmware | No range specified | — |
| amd ryzen_3_pro_2300u_firmware | No range specified | — |
| amd ryzen_5_2500u_firmware | No range specified | — |
| amd ryzen_5_pro_2500u_firmware | No range specified | — |
| amd ryzen_5_2600h_firmware | No range specified | — |
| amd ryzen_7_2700u_firmware | No range specified | — |
| amd ryzen_7_pro_2700u_firmware | No range specified | — |
| amd ryzen_7_2800h_firmware | No range specified | — |
| amd ryzen_3_3300g_firmware | No range specified | — |
| amd ryzen_3_3300x_firmware | No range specified | — |
| amd ryzen_3_3100_firmware | No range specified | — |
| amd ryzen_3_pro_3300u_firmware | No range specified | — |
| amd ryzen_5_3400g_firmware | No range specified | — |
| amd ryzen_5_3450g_firmware | No range specified | — |
| amd ryzen_5_3600_firmware | No range specified | — |
| amd ryzen_5_3600x_firmware | No range specified | — |
| amd ryzen_5_pro_3500u_firmware | No range specified | — |
| amd ryzen_7_3700x_firmware | No range specified | — |
| amd ryzen_7_3800x_firmware | No range specified | — |
| amd ryzen_7_pro_3700u_firmware | No range specified | — |
| amd ryzen_9_5980hx_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_9_5980hs_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_7_5825u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_9_5900hx_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_9_5900hs_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_7_5825c_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_7_5800h_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5625u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_7_5800hs_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5625c_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5600h_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5600hs_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_7_5800u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5600u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_5_5560u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_3_5425u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_3_5425c_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_3_5400u_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
| amd ryzen_3_5125c_firmware | v < cezannepi-fp6_1.0.0.9a | cezannepi-fp6_1.0.0.9a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.