CVE-2021-26379: Input Validation
First published: Tue May 09 2023(Updated: )
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.
Credit: psirt@amd.com psirt@amd.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| AMD EPYC 72F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 72F3 Firmware | ||
| All of | ||
| AMD EPYC Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7313 Firmware | ||
| All of | ||
| AMD EPYC 7313P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7313P Firmware | ||
| All of | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7343 Firmware | ||
| All of | ||
| AMD EPYC 7373X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7373X Firmware | ||
| All of | ||
| AMD EPYC 73F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 73F3 Firmware | ||
| All of | ||
| AMD EPYC 7413 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7413 Firmware | ||
| All of | ||
| AMD EPYC 7443P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7443P | ||
| All of | ||
| AMD EPYC 7443P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7443P Firmware | ||
| All of | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC Server | ||
| All of | ||
| AMD EPYC 7473X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7473X Firmware | ||
| All of | ||
| AMD EPYC 74F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 74F3 Firmware | ||
| All of | ||
| AMD EPYC 7513 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7513 Firmware | ||
| All of | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7543 Firmware | ||
| All of | ||
| AMD EPYC 7543P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7543P Firmware | ||
| All of | ||
| AMD EPYC 7573X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7573X Firmware | ||
| All of | ||
| AMD EPYC 75F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 75F3 Firmware | ||
| All of | ||
| AMD EPYC 7643P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7643 Firmware | ||
| All of | ||
| AMD EPYC 7663 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7663 Firmware | ||
| All of | ||
| AMD EPYC 7713P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7713 Firmware | ||
| All of | ||
| AMD EPYC 7713P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7713P Firmware | ||
| All of | ||
| AMD EPYC 7763 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7763 Firmware | ||
| All of | ||
| AMD EPYC 7773X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7773X Firmware | ||
| All of | ||
| AMD EPYC 7232p firmware | <romepi_1.0.0.e | |
| AMD EPYC 7232p firmware | ||
| All of | ||
| AMD EPYC 7252 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7252 Firmware | ||
| All of | ||
| AMD EPYC 7262 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7262 Firmware | ||
| All of | ||
| AMD EPYC 7272 firmware | <romepi_1.0.0.e | |
| AMD EPYC 7272 firmware | ||
| All of | ||
| AMD EPYC 7282 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7282 Firmware | ||
| All of | ||
| Amd Epyc Server Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7302 Firmware | ||
| All of | ||
| AMD EPYC 7302P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7302P Firmware | ||
| All of | ||
| AMD EPYC Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7352 firmware | ||
| All of | ||
| Amd Epyc Server Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7402 Firmware | ||
| All of | ||
| AMD EPYC 7402P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7402P Firmware | ||
| All of | ||
| AMD EPYC 7452 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| All of | ||
| AMD EPYC 7502 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7502 firmware | ||
| All of | ||
| AMD EPYC 7502P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7502P Firmware | ||
| All of | ||
| AMD EPYC 7532 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7532 Firmware | ||
| All of | ||
| AMD EPYC 7542 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| All of | ||
| AMD EPYC 7552 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7552 Firmware | ||
| All of | ||
| AMD EPYC 7642 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7642 Firmware | ||
| All of | ||
| AMD EPYC 7662 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7662 Firmware | ||
| All of | ||
| AMD EPYC 7702p firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| All of | ||
| AMD EPYC 7702 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7702P | ||
| All of | ||
| AMD EPYC 7742 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| All of | ||
| AMD EPYC 7F32 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7F32 Firmware | ||
| All of | ||
| AMD EPYC 7F52 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7F52 Firmware | ||
| All of | ||
| AMD EPYC 7F72 | <romepi_1.0.0.e | |
| AMD EPYC 7F72 Firmware | ||
| All of | ||
| AMD EPYC 7H12 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7H12 Firmware | ||
| AMD EPYC 72F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 72F3 Firmware | ||
| AMD EPYC Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7313 Firmware | ||
| AMD EPYC 7313P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7313P Firmware | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7343 Firmware | ||
| AMD EPYC 7373X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7373X Firmware | ||
| AMD EPYC 73F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 73F3 Firmware | ||
| AMD EPYC 7413 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7413 Firmware | ||
| AMD EPYC 7443P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7443P | ||
| AMD EPYC 7443P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7443P Firmware | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC Server | ||
| AMD EPYC 7473X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7473X Firmware | ||
| AMD EPYC 74F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 74F3 Firmware | ||
| AMD EPYC 7513 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7513 Firmware | ||
| Amd Epyc Server Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7543 Firmware | ||
| AMD EPYC 7543P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7543P Firmware | ||
| AMD EPYC 7573X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7573X Firmware | ||
| AMD EPYC 75F3 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 75F3 Firmware | ||
| AMD EPYC 7643P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7643 Firmware | ||
| AMD EPYC 7663 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7663 Firmware | ||
| AMD EPYC 7713P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7713 Firmware | ||
| AMD EPYC 7713P Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7713P Firmware | ||
| AMD EPYC 7763 Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7763 Firmware | ||
| AMD EPYC 7773X Firmware | <milanpi_1.0.0.9 | |
| AMD EPYC 7773X Firmware | ||
| AMD EPYC 7232p firmware | <romepi_1.0.0.e | |
| AMD EPYC 7232p firmware | ||
| AMD EPYC 7252 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7252 Firmware | ||
| AMD EPYC 7262 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7262 Firmware | ||
| AMD EPYC 7272 firmware | <romepi_1.0.0.e | |
| AMD EPYC 7272 firmware | ||
| AMD EPYC 7282 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7282 Firmware | ||
| Amd Epyc Server Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7302 Firmware | ||
| AMD EPYC 7302P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7302P Firmware | ||
| AMD EPYC Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7352 firmware | ||
| Amd Epyc Server Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7402 Firmware | ||
| AMD EPYC 7402P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7402P Firmware | ||
| AMD EPYC 7452 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| AMD EPYC 7502 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7502 firmware | ||
| AMD EPYC 7502P Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7502P Firmware | ||
| AMD EPYC 7532 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7532 Firmware | ||
| AMD EPYC 7542 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| AMD EPYC 7552 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7552 Firmware | ||
| AMD EPYC 7642 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7642 Firmware | ||
| AMD EPYC 7662 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7662 Firmware | ||
| AMD EPYC 7702p firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| AMD EPYC 7702 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7702P | ||
| AMD EPYC 7742 Firmware | <romepi_1.0.0.e | |
| AMD EPYC Server | ||
| AMD EPYC 7F32 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7F32 Firmware | ||
| AMD EPYC 7F52 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7F52 Firmware | ||
| AMD EPYC 7F72 | <romepi_1.0.0.e | |
| AMD EPYC 7F72 Firmware | ||
| AMD EPYC 7H12 Firmware | <romepi_1.0.0.e | |
| AMD EPYC 7H12 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2021-26379?
CVE-2021-26379 has a medium severity rating, primarily due to its potential for privilege escalation.
How do I fix CVE-2021-26379?
To mitigate CVE-2021-26379, users should update their affected AMD EPYC firmware to version milanpi_1.0.0.9 or later.
What are the risks associated with CVE-2021-26379?
The risks of CVE-2021-26379 include the potential corruption of SMRAM which can lead to loss of integrity and privilege escalation.
Which AMD processors are affected by CVE-2021-26379?
Affected processors include the AMD EPYC 72F3, 7313, and others with firmware version before milanpi_1.0.0.9.
Is CVE-2021-26379 being actively exploited?
As of now, there have been no reported active exploits for CVE-2021-26379, but users are advised to update their firmware.
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- vendor/amd
- canonical/amd epyc 72f3 firmware
- canonical/amd epyc firmware
- canonical/amd epyc 7313 firmware
- canonical/amd epyc 7313p firmware
- canonical/amd epyc server firmware
- canonical/amd epyc 7343 firmware
- canonical/amd epyc 7373x firmware
- canonical/amd epyc 73f3 firmware
- canonical/amd epyc 7413 firmware
- canonical/amd epyc 7443p firmware
- canonical/amd epyc 7443p
- canonical/amd epyc server
- canonical/amd epyc 7473x firmware
- canonical/amd epyc 74f3 firmware
- canonical/amd epyc 7513 firmware
- canonical/amd epyc 7543 firmware
- canonical/amd epyc 7543p firmware
- canonical/amd epyc 7573x firmware
- canonical/amd epyc 75f3 firmware
- canonical/amd epyc 7643p firmware
- canonical/amd epyc 7643 firmware
- canonical/amd epyc 7663 firmware
- canonical/amd epyc 7713p firmware
- canonical/amd epyc 7713 firmware
- canonical/amd epyc 7763 firmware
- canonical/amd epyc 7773x firmware
- canonical/amd epyc 7232p firmware
- canonical/amd epyc 7252 firmware
- canonical/amd epyc 7262 firmware
- canonical/amd epyc 7272 firmware
- canonical/amd epyc 7282 firmware
- canonical/amd epyc 7302 firmware
- canonical/amd epyc 7302p firmware
- canonical/amd epyc 7352 firmware
- canonical/amd epyc 7402 firmware
- canonical/amd epyc 7402p firmware
- canonical/amd epyc 7452 firmware
- canonical/amd epyc 7502 firmware
- canonical/amd epyc 7502p firmware
- canonical/amd epyc 7532 firmware
- canonical/amd epyc 7542 firmware
- canonical/amd epyc 7552 firmware
- canonical/amd epyc 7642 firmware
- canonical/amd epyc 7662 firmware
- canonical/amd epyc 7702p firmware
- canonical/amd epyc 7702 firmware
- canonical/amd epyc 7702p
- canonical/amd epyc 7742 firmware
- canonical/amd epyc 7f32 firmware
- canonical/amd epyc 7f52 firmware
- canonical/amd epyc 7f72
- canonical/amd epyc 7f72 firmware
- canonical/amd epyc 7h12 firmware