CVE-2021-26350
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...
4.7 Medium
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.14%Down 0.7 points since May 12, 2022
What each source reports
NVD Score used
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
- Record
CVE-2021-26350- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-367
- Updated
- 2026-11-02
CVE List No score
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
- Record
CVE-2021-26350- Updated
- 2026-11-02
EUVDEUVD-2021-13156 No score
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
- Record
EUVD-2021-13156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x724-6q24-6qf9
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
- Record
GHSA-x724-6q24-6qf9- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
OSVSUSE-SU-2022:1751-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):
- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
- Record
SUSE-SU-2022:1751-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1840-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1840-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1846-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1846-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1847-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1847-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1923-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update to version 20220411 (git commit f219d616f42b, bsc#1199459):
- CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26350, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312: Update AMD cpu microcode
Update to version 20220309 (git commit cd01f857da28, bsc#1199470):
- CVE-2021-46744: Ciphertext Side Channels on AMD SEV
Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):
- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
- Record
SUSE-SU-2022:1923-1- Updated
- 2026-11-02
Affected products
- amd epyc 7232p firmware
- amd epyc 7252 firmware
- amd epyc 7262 firmware
- amd epyc 7272 firmware
- amd epyc 7282 firmware
- amd epyc 72f3 firmware
- amd epyc 7302 firmware
- amd epyc 7302p firmware
- amd epyc 7313p firmware
- amd epyc 7343 firmware
- amd epyc 7352 firmware
- amd epyc 7373x firmware
Show 33 moreShow less
- amd epyc 73f3 firmware
- amd epyc 7402 firmware
- amd epyc 7402p firmware
- amd epyc 7413 firmware
- amd epyc 7443p firmware
- amd epyc 7452 firmware
- amd epyc 7453 firmware
- amd epyc 7473x firmware
- amd epyc 74f3 firmware
- amd epyc 7502 firmware
- amd epyc 7502p firmware
- amd epyc 7513 firmware
- amd epyc 7532 firmware
- amd epyc 7542 firmware
- amd epyc 7543p firmware
- amd epyc 7552 firmware
- amd epyc 7573x firmware
- amd epyc 75f3 firmware
- amd epyc 7642 firmware
- amd epyc 7643 firmware
- amd epyc 7662 firmware
- amd epyc 7663 firmware
- amd epyc 7702 firmware
- amd epyc 7702p firmware
- amd epyc 7713 firmware
- amd epyc 7713p firmware
- amd epyc 7742 firmware
- amd epyc 7763 firmware
- amd epyc 7773x firmware
- amd epyc 7f32 firmware
- amd epyc 7f52 firmware
- amd epyc 7f72 firmware
- amd epyc™ processors
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Manager Proxy 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Manager Retail Branch Server 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Manager Server 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Enterprise Storage 6 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Enterprise Storage 7 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.1 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.2 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareopenSUSE:Leap 15.3 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:OpenStack Cloud 9 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 17 CVEs |
before 20220509-150400.4.5.1 | 20220509-150400.4.5.1 |
kernel-firmwareopenSUSE:Leap 15.4 From an advisory covering 17 CVEs |
before 20220509-150400.4.5.1 | 20220509-150400.4.5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-26350 is a medium vulnerability (CVSS 4.7) in Amd Epyc 7232p Firmware, published May 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. No source names a fixed version.
References
amd.com/en/corporate/product-security/bulletin/amd-sb-1028
nvd.nist.gov/vuln/detail/CVE-2021-26350
github.com/advisories/GHSA-x724-6q24-6qf9
suse.com/support/update/announcement/2022/suse-su-20221751-1
bugzilla.suse.com/1192953
Show 24 moreShow less