Skip to content
OpenAdvisories
Unscored CVE-2021-26364 EUVD-2021-13170GHSA-q56v-q98x-mc7h

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which…

Published May 11, 2022 · Updated Sep 16, 2024 · Assigned by AMD

Vendor: AMD Product: EPYC™ Processors

Description

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

Affected products

VendorProductAffectedFixed
AMD EPYC™ Processors various —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP4 kernel-firmware 20220509-150400.4.5.1 SUSE-SU-2022:1923-1
SLES 15 SP3 kernel-firmware 20210208-150300.4.10.1 SUSE-SU-2022:1840-1
SLES 15 SP2 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLES 15 SP1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLES 15 kernel-firmware 20191118-150000.3.42.1 SUSE-SU-2022:1847-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP5 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SLES 12 SP4 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SLES for SAP 15 SP2 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLES for SAP 15 SP1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLES for SAP 15 kernel-firmware 20191118-150000.3.42.1 SUSE-SU-2022:1847-1
SLES for SAP 12 SP5 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SLES for SAP 12 SP4 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SLE Micro 5.2 kernel-firmware 20210208-150300.4.10.1 SUSE-SU-2022:1840-1
SLE Micro 5.1 kernel-firmware 20210208-150300.4.10.1 SUSE-SU-2022:1840-1
SLE HPC 15 SP2 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLE HPC 15 SP1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SLE HPC 15 kernel-firmware 20191118-150000.3.42.1 SUSE-SU-2022:1847-1
SUSE OpenStack Cloud Crowbar 9 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SUSE OpenStack Cloud 9 kernel-firmware 20190618-5.25.2 SUSE-SU-2022:1846-1
SUSE Manager Server 4.1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SUSE Manager Retail Branch Server 4.1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SUSE Manager Proxy 4.1 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SUSE Enterprise Storage 7 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1
SUSE Enterprise Storage 6 kernel-firmware 20200107-150100.3.31.1 SUSE-SU-2022:1751-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-firmware 20220516-1.1 openSUSE-SU-2024:12088-1
openSUSE Tumbleweed kernel-firmware-bluetooth 20250208-1.1 openSUSE-SU-2025:14774-1
openSUSE Tumbleweed kernel-firmware-i915 +1 20250210-1.1 openSUSE-SU-2025:14798-1, openSUSE-SU-2025:14779-1
openSUSE Tumbleweed kernel-firmware-ti +30 20250206-1.1 openSUSE-SU-2025:14804-1, openSUSE-SU-2025:14801-1, openSUSE-SU-2025:14800-1
openSUSE Leap 15.4 kernel-firmware 20220509-150400.4.5.1 SUSE-SU-2022:1923-1
openSUSE Leap 15.3 kernel-firmware 20210208-150300.4.10.1 SUSE-SU-2022:1840-1

Advisories 41

References