PT-2022-9748 · Unknown+1 · Amd System Management Unit+1

Shawn Hoffman · Published 2022-05-11 · Updated 2023-08-08 · CVE-2021-26376

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions System Management Unit (SMU) (affected versions not specified)

Description The issue is related to insufficient checks in the System Management Unit (SMU) FeatureConfig, which may result in the reenabling of features. This could potentially lead to denial of resources and/or denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26376

OPENSUSE-SU-2022_1840-1

OPENSUSE-SU-2022_1923-1

SUSE-SU-2022:1751-1

SUSE-SU-2022:1840-1

SUSE-SU-2022:1846-1

SUSE-SU-2022:1847-1

SUSE-SU-2022:1923-1

Affected Products

Suse

Amd System Management Unit

References · 38

• https://osv.dev/vulnerability/SUSE-SU-2022:1840-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1923-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26376 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1847-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1028 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1846-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1751-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26376 · Security Note
• https://suse.com/security/cve/CVE-2021-26348 · Note
• https://suse.com/security/cve/CVE-2021-26376 · Note
• https://suse.com/security/cve/CVE-2021-26350 · Note
• https://suse.com/support/update/announcement/2022/suse-su-20221847-1 · Note
• https://bugzilla.suse.com/1199459 · Note
• https://suse.com/security/cve/CVE-2021-26378 · Note