CVE-2021-46755: AMD Ryzen™ 3000 Series Desktop Processors “Matisse”

Описание

Оригинално описание

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.

Засегнати продукти

• AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4: various
• AMD AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4: various
• AMD Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4: various
• AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT: various
• AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS: various
• AMD Ryzen™ Threadripper™ PRO Processors “Chagall” WS: various
• AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” : various
• AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”: various
• AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”: various

История

Други уязвимости в AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4

• CVE-2023-20596
• CVE-2023-20571
• 7.8CVE-2023-20563
• CVE-2022-23821
• CVE-2021-46758

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-46755
• https://nvd.nist.gov/vuln/detail/CVE-2021-46755
• https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001