Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-26339


A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.


Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.5, requiring local system access to exploit with relatively low complexity without requiring user interaction requiring only low-level privileges . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 168 products from amd, from amd, from amd and 165 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2022, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.


Published

2022-05-11T17:15:08.253

Last Modified

2024-11-21T05:56:08.687

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System amd epyc_7763_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7763 - No
Operating System amd epyc_7713p_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7713p - No
Operating System amd epyc_7713_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7713 - No
Operating System amd epyc_7663_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7663 - No
Operating System amd epyc_7643_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7643 - No
Operating System amd epyc_75f3_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_75f3 - No
Operating System amd epyc_7543p_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7543p - No
Operating System amd epyc_7543_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7543 - No
Operating System amd epyc_7513_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7513 - No
Operating System amd epyc_7453_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7453 - No
Operating System amd epyc_74f3_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_74f3 - No
Operating System amd epyc_7443p_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7443p - No
Operating System amd epyc_7443_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7443 - No
Operating System amd epyc_7413_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7413 - No
Operating System amd epyc_73f3_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_73f3 - No
Operating System amd epyc_7343_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7343 - No
Operating System amd epyc_7313p_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7313p - No
Operating System amd epyc_7313_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7313 - No
Operating System amd epyc_72f3_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_72f3 - No
Operating System amd epyc_7773x_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7773x - No
Operating System amd epyc_7473x_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7473x - No
Operating System amd epyc_7573x_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7573x - No
Operating System amd epyc_7373x_firmware < milanpi-sp3_1.0.0.7 Yes
Hardware amd epyc_7373x - No
Operating System amd ryzen_7_5700g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_7_5700g - No
Operating System amd ryzen_7_5700ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_7_5700ge - No
Operating System amd ryzen_5_5700g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_5_5700g - No
Operating System amd ryzen_5_5700ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_5_5700ge - No
Operating System amd ryzen_3_5300g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_3_5300g - No
Operating System amd ryzen_3_5300ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_3_5300ge - No
Operating System amd ryzen_7_4700g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_7_4700g - No
Operating System amd ryzen_7_4700ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_7_4700ge - No
Operating System amd ryzen_5_4600g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_5_4600g - No
Operating System amd ryzen_5_4600ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_5_4600ge - No
Operating System amd ryzen_3_4300g_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_3_4300g - No
Operating System amd ryzen_3_4300ge_firmware < comboam4_v2_pi_1.2.0.6c Yes
Hardware amd ryzen_3_4300ge - No
Operating System amd ryzen_threadripper_pro_3945wx_firmware * Yes
Hardware amd ryzen_threadripper_pro_3945wx - No
Operating System amd ryzen_threadripper_pro_3955wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3955wx - No
Operating System amd ryzen_threadripper_pro_3975wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3975wx - No
Operating System amd ryzen_threadripper_pro_3995wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_3995wx - No
Operating System amd ryzen_threadripper_pro_5945wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_5945wx - No
Operating System amd ryzen_threadripper_pro_5955wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_5955wx - No
Operating System amd ryzen_threadripper_pro_5965wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_5965wx - No
Operating System amd ryzen_threadripper_pro_5975wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_5975wx - No
Operating System amd ryzen_threadripper_pro_5995wx_firmware - Yes
Hardware amd ryzen_threadripper_pro_5995wx - No
Operating System amd ryzen_3_2200u_firmware - Yes
Hardware amd ryzen_3_2200u - No
Operating System amd ryzen_3_2300u_firmware - Yes
Hardware amd ryzen_3_2300u - No
Operating System amd ryzen_3_pro_2300u_firmware - Yes
Hardware amd ryzen_3_pro_2300u - No
Operating System amd ryzen_5_2500u_firmware - Yes
Hardware amd ryzen_5_2500u - No
Operating System amd ryzen_5_pro_2500u_firmware - Yes
Hardware amd ryzen_5_pro_2500u - No
Operating System amd ryzen_5_2600h_firmware - Yes
Hardware amd ryzen_5_2600h - No
Operating System amd ryzen_7_2700u_firmware - Yes
Hardware amd ryzen_7_2700u - No
Operating System amd ryzen_7_pro_2700u_firmware - Yes
Hardware amd ryzen_7_pro_2700u - No
Operating System amd ryzen_7_2800h_firmware - Yes
Hardware amd ryzen_7_2800h - No
Operating System amd ryzen_3_3300g_firmware - Yes
Hardware amd ryzen_3_3300g - No
Operating System amd ryzen_3_3300x_firmware - Yes
Hardware amd ryzen_3_3300x - No
Operating System amd ryzen_3_3100_firmware - Yes
Hardware amd ryzen_3_3100 - No
Operating System amd ryzen_3_pro_3300u_firmware - Yes
Hardware amd ryzen_3_pro_3300u - No
Operating System amd ryzen_5_3400g_firmware - Yes
Hardware amd ryzen_5_3400g - No
Operating System amd ryzen_5_3450g_firmware - Yes
Hardware amd ryzen_5_3450g - No
Operating System amd ryzen_5_3600_firmware - Yes
Hardware amd ryzen_5_3600 - No
Operating System amd ryzen_5_3600x_firmware - Yes
Hardware amd ryzen_5_3600x - No
Operating System amd ryzen_5_pro_3500u_firmware - Yes
Hardware amd ryzen_5_pro_3500u - No
Operating System amd ryzen_7_3700x_firmware - Yes
Hardware amd ryzen_7_3700x - No
Operating System amd ryzen_7_3800x_firmware - Yes
Hardware amd ryzen_7_3800x - No
Operating System amd ryzen_7_pro_3700u_firmware - Yes
Hardware amd ryzen_7_pro_3700u - No
Operating System amd ryzen_9_5980hx_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_9_5980hx - No
Operating System amd ryzen_9_5980hs_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_9_5980hs - No
Operating System amd ryzen_7_5825u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_7_5825u - No
Operating System amd ryzen_9_5900hx_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_9_5900hx - No
Operating System amd ryzen_9_5900hs_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_9_5900hs - No
Operating System amd ryzen_7_5825c_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_7_5825c - No
Operating System amd ryzen_7_5800h_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_7_5800h - No
Operating System amd ryzen_5_5625u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5625u - No
Operating System amd ryzen_7_5800hs_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_7_5800hs - No
Operating System amd ryzen_5_5625c_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5625c - No
Operating System amd ryzen_5_5600h_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5600h - No
Operating System amd ryzen_5_5600hs_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5600hs - No
Operating System amd ryzen_7_5800u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_7_5800u - No
Operating System amd ryzen_5_5600u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5600u - No
Operating System amd ryzen_5_5560u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_5_5560u - No
Operating System amd ryzen_3_5425u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_3_5425u - No
Operating System amd ryzen_3_5425c_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_3_5425c - No
Operating System amd ryzen_3_5400u_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_3_5400u - No
Operating System amd ryzen_3_5125c_firmware < cezannepi-fp6_1.0.0.9a Yes
Hardware amd ryzen_3_5125c - No

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For amd's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.