CVE-2021-26352
Medium
Description
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Ryzen 5 2600 Firmware
PublishedMay 10, 2022
First seenMay 10, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_5_2600_firmware | No range specified | — |
| amd ryzen_5_2600x_firmware | No range specified | — |
| amd ryzen_5_2700x_firmware | No range specified | — |
| amd ryzen_5_2700_firmware | No range specified | — |
| amd ryzen_5_3600_firmware | No range specified | — |
| amd ryzen_5_3600x_firmware | No range specified | — |
| amd ryzen_7_3700x_firmware | No range specified | — |
| amd ryzen_7_3800x_firmware | No range specified | — |
| amd ryzen_9_3900x_firmware | No range specified | — |
| amd ryzen_9_3950x_firmware | No range specified | — |
| amd ryzen_9_5950x_firmware | No range specified | — |
| amd ryzen_9_5900x_firmware | No range specified | — |
| amd ryzen_7_5800x_firmware | No range specified | — |
| amd ryzen_7_5700g_firmware | No range specified | — |
| amd ryzen_7_5700ge_firmware | No range specified | — |
| amd ryzen_5_5600g_firmware | No range specified | — |
| amd ryzen_5_5600x_firmware | No range specified | — |
| amd ryzen_5_5600ge_firmware | No range specified | — |
| amd ryzen_3_5300g_firmware | No range specified | — |
| amd ryzen_3_5300ge_firmware | No range specified | — |
| amd ryzen_threadripper_2990wx_firmware | No range specified | — |
| amd ryzen_threadripper_2970wx_firmware | No range specified | — |
| amd ryzen_threadripper_2950x_firmware | No range specified | — |
| amd ryzen_threadripper_2920x_firmware | No range specified | — |
| amd ryzen_threadripper_3970x_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5995wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5975wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5965wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5955wx_firmware | No range specified | — |
| amd ryzen_threadripper_pro_5945wx_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.