PT-2022-9738 · Amd · Athlon™ Series+21

Published 2022-05-12 · Updated 2022-06-08 · CVE-2021-26362

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call, which results in mapping sensitive System Management Network (SMN) registers. This leads to a loss of integrity and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26362

Affected Products

Athlon™ Series

Ryzen™ Series

Athlon 3050Ge Firmware

Athlon 3150Ge Firmware

Radeon

Ryzen 3 2200U Firmware

Ryzen 3 2300U Firmware

Ryzen 3 5125C Firmware

Ryzen 3 5400U Firmware

Ryzen 3 5425U Firmware

Ryzen 5 2500U Firmware

Ryzen 5 2600H Firmware

Ryzen 5 5560U Firmware

Ryzen 5 5600X Firmware

Ryzen 5 5625U Firmware

Ryzen 5 5700G Firmware

Ryzen 7 2700U Firmware

Ryzen 7 2800H Firmware

Ryzen 7 5800U Firmware

Ryzen 7 5825U Firmware

Ryzen 9 5900Hx Firmware

Ryzen 9 5980Hx Firmware

References · 3

• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26362 · Security Note
• https://t.me/cibsecurity/42542 · Telegram Post