Out-of-bounds read in 3rd Gen AMD EPYC Processors and 2nd Gen AMD EPYC Processors - CVE-2021-26388

Vulnerability identifier: #VU63687

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-26388

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation in the BIOS directory that allows for searches to read beyond the directory table copy in RAM. A local user can perform a denial of service (DoS) attack.

3rd Gen AMD EPYC Processors
2nd Gen AMD EPYC Processors
AMD Ryzen 3000 Series Desktop processor
AMD Ryzen 2000 series Desktop processor
AMD Ryzen 5000 Series Mobile processor with Radeon graphics
AMD Ryzen 3000 Series Mobile processor with Radeon graphics
AMD Athlon 3000 Series Mobile processors with Radeon Graphics
2nd Gen AMD Ryzen Mobile processor with Radeon graphics
AMD Ryzen 3000 Series Mobile processor
AMD Ryzen Threadripper PRO processors
3rd Gen AMD Ryzen Threadripper processors
2nd Gen AMD Ryzen Threadripper processors
AMD Ryzen 5000 Series Desktop processor
AMD Ryzen 2000 Series Mobile processor
HPE ProLiant DL385 Gen10 Server
HPE ProLiant DL325 Gen10 Server
HPE ProLiant DL385 Gen10 Plus server
HPE ProLiant DL325 Gen10 Plus server
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
Dell EMC NetWorker vProxy
R7425
R7415
R6415
XE8545
R7525
R6525
R7515
R6515
C6525
ucode-amd
kernel-firmware
kernel-firmware-ath10k
kernel-firmware-mellanox
kernel-firmware-mediatek
kernel-firmware-media
kernel-firmware-marvell
kernel-firmware-liquidio
kernel-firmware-iwlwifi
kernel-firmware-intel
kernel-firmware-all
kernel-firmware-amdgpu
kernel-firmware-i915
kernel-firmware-ath11k
kernel-firmware-atheros
kernel-firmware-bluetooth
kernel-firmware-bnx2
kernel-firmware-brcm
kernel-firmware-chelsio
kernel-firmware-dpaa2
kernel-firmware-network
kernel-firmware-usb-network
kernel-firmware-ueagle
kernel-firmware-ti
kernel-firmware-sound
kernel-firmware-serial
kernel-firmware-realtek
kernel-firmware-radeon
kernel-firmware-qlogic
kernel-firmware-prestera
kernel-firmware-platform
kernel-firmware-nvidia
kernel-firmware-nfp
kernel-firmware-mwifiex
kernel-firmware-qcom

Install updates from vendor's website.

3rd Gen AMD EPYC Processors - update to MilanPI-SP3_1.0.0.7
2nd Gen AMD EPYC Processors - update to RomePI-SP3_1.0.0.D
Dell EMC NetWorker vProxy - update to 4.3.0-32
R7425 - update to 1.18.0
R7415 - update to 1.18.0
R6415 - update to 1.18.0
XE8545 - update to 2.6.6
R7525 - update to 2.6.6
R6525 - update to 2.6.6
R7515 - update to 2.6.6
R6515 - update to 2.6.6
C6525 - update to 2.6.7
HPE ProLiant DL385 Gen10 Server - update to 2.56
HPE ProLiant DL325 Gen10 Server - update to 2.56
HPE ProLiant DL385 Gen10 Plus server - update to 2.56
HPE ProLiant DL325 Gen10 Plus server - update to 2.56
ucode-amd - addressed in versions 20190618-5.25.2, 20191118-150000.3.42.1, 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware - addressed in versions 20190618-5.25.2, 20191118-150000.3.42.1, 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-ath10k - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-mellanox - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-mediatek - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-media - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-marvell - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-liquidio - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-iwlwifi - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-intel - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-all - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-amdgpu - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-i915 - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-ath11k - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-atheros - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-bluetooth - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-bnx2 - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-brcm - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-chelsio - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-dpaa2 - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-network - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-usb-network - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-ueagle - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-ti - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-sound - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-serial - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-realtek - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-radeon - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-qlogic - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-prestera - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-platform - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-nvidia - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-nfp - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-mwifiex - addressed in versions 20210208-150300.4.10.1, 20220509-150400.4.5.1
kernel-firmware-qcom - update to 20220509-150400.4.5.1

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028

• Multiple vulnerabilities in AMD EPYC processors
• Multiple vulnerabilities in various AMD processors
• SUSE update for kernel-firmware
• Multiple vulnerabilities in Dell EMC NetWorker vProxy
• Multiple vulnerabilities in Dell PowerEdge Server
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• Multiple vulnerabilities in HPE ProLiant Gen10 and Gen10 Plus Servers