CVE-2021-26379

No fix known EPSS <1%CVSS 9.8

Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.

Published 2023-05-09 · CVE record · OSV

Products: 2nd Gen AMD EPYC™, 3rd Gen AMD EPYC™