First published: Wed Feb 15 2023(Updated: )
In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Amperecomputing Ampere Altra Firmware | <2.10c | |
Amperecomputing Ampere Altra | ||
Amperecomputing Ampere Altra Max Firmware | <2.10c | |
Amperecomputing Ampere Altra Max |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2022-46892.
The severity of CVE-2022-46892 is critical (9.8).
Ampere Altra and Ampere AltraMax firmware versions up to exclusive 2.10c are affected.
CVE-2022-46892 allows the OS to reinitialize a disabled root complex.
To fix CVE-2022-46892, update the Ampere Altra and Ampere AltraMax firmware to version 2.10c or higher.