by Kastro CVE-2021-46756
AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4 — Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicio…
Description · from the CVE record
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious Uapp or ABL to send malformed or invalid syscall to the bootloader resulting in a potential denial of service and loss of integrity.
Affected
ProductAffectedFixed inSource
Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4various –CNA
Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”various –CNA
Ryzen™ 3000 Series Desktop Processors “Matisse” AM4various –CNA
AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4various –CNA
Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4Various –CNA
2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”various –CNA
3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDTvarious–CNA
Ryzen™ Threadripper™ PRO Processors “Castle Peak” WSvarious –CNA
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPvarious –CNA
Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”various –CNA
Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5various –CNA
Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”various –CNA
Scores by source
CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial