CVE-2021-39298
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security mechanisms provided in the UEFI firmware.
CVE-2021-39298
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2021-39298
2nd Gen EPYC
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
3rd Gen EPYC
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Ryzen 2000 Series
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Ryzen 3000 Series
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Ryzen 5000 Series
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "AMD",
"product": "2nd Gen EPYC",
"versions": [
{
"status": "affected",
"version": "Various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
},
{
"vendor": "AMD",
"product": "3rd Gen EPYC",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
},
{
"vendor": "AMD",
"product": "Ryzen 2000 Series",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
},
{
"vendor": "AMD",
"product": "Ryzen 3000 Series",
"versions": [
{
"status": "affected",
"version": "Various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
},
{
"vendor": "AMD",
"product": "Ryzen 5000 Series",
"versions": [
{
"status": "affected",
"version": "various"
}
],
"platforms": [
"x86"
],
"packageName": "AGESA",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2021-39298
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #12107 · Revision 1
- Added to Heist Feed
- Publisher date