Strix
26.1K

CVE-2021-46778

MEDIUMCVSS 5.6/10EPSS 0.22%

Last modified

CVE-2021-46778 is a medium-severity vulnerability rated 5.6/10 on the CVSS scale. Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.. EPSS estimates a 0.22% chance of exploitation in the next 30 days.

Description

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

Metrics

CVSS 3.1
5.6/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS Probability
0.22%

12.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
AmdAthlon 3050ge FirmwareAll versions
AmdAthlon 3150g FirmwareAll versions
AmdAthlon 3150ge FirmwareAll versions
AmdEpyc 7001 FirmwareAll versions
AmdEpyc 7002 FirmwareAll versions
AmdEpyc 7003 FirmwareAll versions
AmdEpyc 7232p FirmwareAll versions
AmdEpyc 7251 FirmwareAll versions
AmdEpyc 7252 FirmwareAll versions
AmdEpyc 7261 FirmwareAll versions
AmdEpyc 7262 FirmwareAll versions
AmdEpyc 7272 FirmwareAll versions
AmdEpyc 7281 FirmwareAll versions
AmdEpyc 7282 FirmwareAll versions
AmdEpyc 72f3 FirmwareAll versions
AmdEpyc 7301 FirmwareAll versions
AmdEpyc 7302 FirmwareAll versions
AmdEpyc 7302p FirmwareAll versions
AmdEpyc 7313 FirmwareAll versions
AmdEpyc 7313p FirmwareAll versions
AmdEpyc 7343 FirmwareAll versions
AmdEpyc 7351 FirmwareAll versions
AmdEpyc 7351p FirmwareAll versions
AmdEpyc 7352 FirmwareAll versions
AmdEpyc 7371 FirmwareAll versions
AmdEpyc 7373x FirmwareAll versions
AmdEpyc 73f3 FirmwareAll versions
AmdEpyc 7401 FirmwareAll versions
AmdEpyc 7401p FirmwareAll versions
AmdEpyc 7402 FirmwareAll versions
AmdEpyc 7402p FirmwareAll versions
AmdEpyc 7413 FirmwareAll versions
AmdEpyc 7443 FirmwareAll versions
AmdEpyc 7443p FirmwareAll versions
AmdEpyc 7451 FirmwareAll versions
AmdEpyc 7452 FirmwareAll versions
AmdEpyc 7453 FirmwareAll versions
AmdEpyc 7473x FirmwareAll versions
AmdEpyc 74f3 FirmwareAll versions
AmdEpyc 7501 FirmwareAll versions
AmdEpyc 7502 FirmwareAll versions
AmdEpyc 7502p FirmwareAll versions
AmdEpyc 7513 FirmwareAll versions
AmdEpyc 7532 FirmwareAll versions
AmdEpyc 7542 FirmwareAll versions
AmdEpyc 7543 FirmwareAll versions
AmdEpyc 7543p FirmwareAll versions
AmdEpyc 7551 FirmwareAll versions
AmdEpyc 7551p FirmwareAll versions
AmdEpyc 7552 FirmwareAll versions

Showing 50 of 179 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2021-46778?
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
How severe is CVE-2021-46778?
CVE-2021-46778 has a CVSS score of 5.6/10 (MEDIUM severity). The EPSS model estimates a 0.22% probability of exploitation in the next 30 days.
How do I fix CVE-2021-46778?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-46778?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST