Amd Epyc 7261 Firmware vulnerabilities

• amd epyc™ 7001 processors, epyc™ 7002 processors, epyc™ 7003 processors +126 more +128 more A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and... CVE-2023-20578 7.5 HighAugust 13, 2024
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors +97 more +99 more An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow... CVE-2021-26344 7.2 HighAugust 13, 2024
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +69 more +71 more Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker... CVE-2023-20592 Fix available 6.5 MediumNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +77 more +79 more Insufficient input validation in the ASP Bootloader may enable a privileged attacker with... CVE-2023-20526 1.9 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +104 more +106 more TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM... CVE-2023-20521 3.3 LowNovember 14, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +147 more +149 more Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to... CVE-2021-46774 6.7 MediumNovember 14, 2023
• amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon gold pro 3150g firmware +49 more +51 more Speculative Leaks CVE-2023-20588 Fix available EPSS 11.2% 5.5 MediumAugust 8, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 more Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)... CVE-2021-46756 9.1 CriticalMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 more Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD... CVE-2021-26406 7.5 HighMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 more A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which... CVE-2021-26371 5.5 MediumMay 9, 2023
• amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 more A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read... CVE-2021-26356 7.4 HighMay 9, 2023
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 more Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return... CVE-2023-20520 9.8 CriticalMay 9, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read... CVE-2023-20527 6.5 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 more Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret... CVE-2021-26403 6.5 MediumJanuary 10, 2023
• amd 1st gen epyc, 2nd gen epyc, 3rd gen epyc +64 more +66 more Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or... CVE-2021-26398 7.8 HighJanuary 10, 2023
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 more IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets... CVE-2022-23824 Fix available 5.5 MediumNovember 9, 2022
• amd processors, athlon 3050ge firmware, athlon 3150g firmware +177 more +179 more Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU... CVE-2021-46778 5.6 MediumAugust 9, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +124 more +126 more Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type... CVE-2022-23825 Fix available 6.5 MediumJuly 12, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more AMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to... CVE-2022-29900 Public exploitFix available 6.5 MediumJuly 12, 2022
• amd processors, a10-9600p firmware, a10-9630p firmware +140 more +142 more A potential vulnerability in some AMD processors using frequency scaling may allow an... CVE-2022-23823 6.5 MediumJune 15, 2022
• amd processors, epyc 7001 firmware, epyc 7002 firmware +97 more +99 more An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV... CVE-2021-46744 6.5 MediumMay 11, 2022
• amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 more In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a... CVE-2021-26342 3.3 LowMay 11, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially... CVE-2021-26341 6.5 MediumMarch 11, 2022
• amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 more LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. CVE-2021-26401 Fix available 5.6 MediumMarch 11, 2022
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +105 more +107 more AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted... CVE-2020-12966 5.5 MediumFebruary 4, 2022
• amd epyc™, epyc 7001 firmware, epyc 7232p firmware +103 more +105 more A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES... CVE-2021-26340 8.4 HighDecember 10, 2021
• amd athlon™ series, epyc 7232p firmware, epyc 7251 firmware +56 more +58 more Insufficient validation of BIOS image length by PSP Firmware could lead to arbitrary code execution. CVE-2020-12944 7.8 HighNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 more Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker... CVE-2021-26321 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 more Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV... CVE-2021-26320 5.5 MediumNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 more Persistent platform private key may not be protected with a random IV leading to a potential “two... CVE-2021-26322 7.5 HighNovember 16, 2021
• amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 more AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is... CVE-2021-26329 5.5 MediumNovember 16, 2021
• amd athlon™ series, epyc 7232p firmware, epyc 7251 firmware +57 more +59 more PSP protection against improperly configured side channels may lead to potential information... CVE-2021-26312 5.5 MediumNovember 16, 2021
• amd 1st/2nd/3rd gen amd epyc™ processors, epyc 7001 firmware, epyc 7002 firmware +59 more +61 more A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted. CVE-2020-12988 7.5 HighJune 11, 2021