CVE-2021-26330: Medium severity AMD Epyc 7003 Firmware vulnerability
Published Nov 16, 2021
·Updated
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
Affected Software
116 affected components
AMD Epyc 7003 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7003
AMD Epyc 7002 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7002
AMD Epyc 7001 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7001
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 72f3
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313p
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7343
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 73f3
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7413
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443p
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 74f3
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7513
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543p
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 75f3
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7643
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7663
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713p
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7763
AMD Epyc 7232p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7232p
AMD Epyc 7252 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7252
AMD Epyc 7262 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7262
AMD Epyc 7272 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7272
AMD Epyc 7282 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7282
AMD Epyc 7302 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7302
AMD Epyc 7302p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7302p
AMD Epyc 7352 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7352
AMD Epyc 7402 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7402
AMD Epyc 7402p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7402p
AMD Epyc 7452 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7452
AMD Epyc 7502 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7502
AMD Epyc 7502p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7502p
AMD Epyc 7532 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7532
AMD Epyc 7542 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7542
AMD Epyc 7552 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7552
AMD Epyc 7642 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7642
AMD Epyc 7662 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7662
AMD Epyc 7702 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7702
AMD Epyc 7702p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7702p
AMD Epyc 7742 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7742
AMD Epyc 7f32 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7f32
AMD Epyc 7f52 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7f52
AMD Epyc 7f72 Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7f72
AMD Epyc 7251 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7251
AMD Epyc 7281 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7281
AMD Epyc 7301 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7301
AMD Epyc 7351 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7351
AMD Epyc 7351p Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7351p
AMD Epyc 7401 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7401
AMD Epyc 7401p Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7401p
AMD Epyc 7451 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7451
AMD Epyc 7501 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7501
AMD Epyc 7551 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7551
AMD Epyc 7551p Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7551p
AMD Epyc 7601 Firmware<naplespi-sp3_1.0.0.g
AMD Epyc 7601
Event History
Nov 16, 2021
CVE Published
via MITRE·06:19 PM
Data Sourced
via MITRE·06:19 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26330?
CVE-2021-26330 is classified as a high severity vulnerability due to the potential for heap-based overflow impacting resource integrity.
2
How do I fix CVE-2021-26330?
The recommended fix for CVE-2021-26330 involves updating the affected AMD EPYC 7003 firmware to versions beyond milanpi-sp3_1.0.0.4.
3
Which AMD products are affected by CVE-2021-26330?
CVE-2021-26330 affects AMD EPYC 7003 series firmware versions prior to milanpi-sp3_1.0.0.4.
4
What impact does CVE-2021-26330 have on systems?
CVE-2021-26330 may lead to a loss of resources and compromise system stability if exploited.
5
Is CVE-2021-26330 a remote or local vulnerability?
CVE-2021-26330 is considered a local vulnerability that requires an attacker to have access to the system for exploitation.