Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Markus Kostl

Researcher fromGraz University of Technology
#44924of 53,632
5.6Total CVSS
Vulnerabilities · 1
PT-2022-12915
5.6
2022-08-09
Amd · Amd Zen 1 · CVE-2021-46778
**Name of the Vulnerable Software and Affected Versions** AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT) **Description** The issue is related to execution unit scheduler contention, which may lead to a side channel vulnerability. By measuring the contention level on scheduler queues, an attacker may potentially leak sensitive information. This vulnerability, known as SQUIP, affects AMD processors and allows an attacker to determine data used in other processes or virtual machines or establish a hidden communication channel between them, bypassing system access control mechanisms. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.