Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-46774

Fixed in a distro release EPSS <1%CVSS 6.7

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service.

Published 2023-11-14 · CVE record · OSV

Products: AMD Ryzen™ 3000 series Desktop Processors “Matisse", AMD Ryzen™ 5000 Series Desktop Processors “Vermeer”, AMD Ryzen™ Threadripper™ 3000 Series Processors “Castle Peak” HEDT, AMD Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS SP3, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “Chagall” WS, 1st Gen AMD EPYC™ Processors, 2nd Gen AMD EPYC™ Processors, 3rd Gen AMD EPYC™ Processors, 4th Gen AMD EPYC™ Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD Ryzen™ Embedded 5000

Distro releases

ReleasePackageFixed in
SUSE Enterprise Storage 7.1kernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSkernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSkernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSkernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSkernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise Micro 5.1kernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise Micro 5.2kernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise Micro 5.3kernel-firmware20220509-150400.4.25.1
SUSE Linux Enterprise Micro 5.4kernel-firmware20220509-150400.4.25.1
SUSE Linux Enterprise Micro 5.5kernel-firmware20230724-150500.3.9.1
SUSE Linux Enterprise Module for Basesystem 15 SP4kernel-firmware20220509-150400.4.25.1
SUSE Linux Enterprise Module for Basesystem 15 SP5kernel-firmware20230724-150500.3.9.1
SUSE Linux Enterprise Server 12 SP5kernel-firmware20190618-5.34.1
SUSE Linux Enterprise Server 15 SP1-LTSSkernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise Server 15 SP2-LTSSkernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise Server 15 SP3-LTSSkernel-firmware20210208-150300.4.19.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5kernel-firmware20190618-5.34.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1kernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2kernel-firmware20200107-150100.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3kernel-firmware20210208-150300.4.19.1
openSUSE Leap 15.4kernel-firmware20220509-150400.4.25.1
openSUSE Leap 15.5kernel-firmware20230724-150500.3.9.1
openSUSE Leap Micro 5.3kernel-firmware20220509-150400.4.25.1
openSUSE Leap Micro 5.4kernel-firmware20220509-150400.4.25.1