CVE-2021-26384
High
Description
A malformed SMI (System Management Interface) command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAmd Ryzen 7 5700g Firmware
PublishedJul 14, 2022
First seenJul 14, 2022
How to fix
Update
- amd ryzen_7_5700g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_7_5700ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_9_5980hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5980hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825u_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825c_firmwarecezannepi-fp6_1.0.0.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_7_5700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_5700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_5980hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5980hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5560u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5400u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5125c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd athlon_silver_3050u_firmware | No range specified | — |
| amd athlon_gold_3150u_firmware | No range specified | — |
| amd ryzen_3_3200u_firmware | No range specified | — |
| amd ryzen_3_3250u_firmware | No range specified | — |
| amd ryzen_3_3300u_firmware | No range specified | — |
| amd ryzen_3_3350u_firmware | No range specified | — |
| amd ryzen_3_3450u_firmware | No range specified | — |
| amd ryzen_3_3500u_firmware | No range specified | — |
| amd ryzen_3_3500c_firmware | No range specified | — |
| amd ryzen_3_3550h_firmware | No range specified | — |
| amd ryzen_3_3580u_firmware | No range specified | — |
| amd ryzen_3_3700u_firmware | No range specified | — |
| amd ryzen_3_3700c_firmware | No range specified | — |
| amd ryzen_3_3750h_firmware | No range specified | — |
| amd ryzen_3_3780u_firmware | No range specified | — |
| amd ryzen_3_2200u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_3_2300u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2500u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600h_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2600x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2700_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_5_2700x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700u_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2700x_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
| amd ryzen_7_2800h_firmware | v < comboam4v2_pi_1.2.0.6c | comboam4v2_pi_1.2.0.6c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.