Out-of-bounds read in AMD products - CVE-2021-26345

Vulnerability identifier: #VU84022

CSH Severity: Low

CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-26345

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in APCB. A local user can trigger an out-of-bounds read error and perform a denial of service (DoS) attack.

4th Gen AMD EPYC Processors
3rd Gen AMD EPYC Processors
2nd Gen AMD EPYC Processors
HPE ProLiant DL385 Gen10 Plus server
HPE ProLiant DL325 Gen10 Plus server
HPE ProLiant DL325 Gen10 Plus v2 server
HPE ProLiant DL365 Gen10 Plus server
HPE ProLiant DL345 Gen10 Plus server
HPE ProLiant DL385 Gen10 Plus v2 server
HPE ProLiant DX385 Gen10 Plus server
HPE ProLiant DX385 Gen10 Plus v2 server
HPE ProLiant XL225n Gen10 Plus 1U Node
HPE ProLiant XL645d Gen10 Plus Server
HPE ProLiant XL675d Gen10 Plus Server
HPE ProLiant DL385 Gen10 Server
HPE ProLiant DL325 Gen10 Server
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
PowerFlex Appliance
PowerFlex rack
Storage Resource Manager
ProLiant DL325 Gen11 Server
ProLiant DL345 Gen11
ProLiant DL365 Gen11 Server
ProLiant DL385 Gen11
Dell EMC Storage Monitoring and Reporting (SMR)
ucode-amd
kernel-firmware
kernel-firmware-dpaa2
kernel-firmware-ath11k
kernel-firmware-amdgpu
kernel-firmware-serial
kernel-firmware-realtek
kernel-firmware-ueagle
kernel-firmware-prestera
kernel-firmware-mediatek
kernel-firmware-all
kernel-firmware-brcm
kernel-firmware-platform
kernel-firmware-bluetooth
kernel-firmware-iwlwifi
kernel-firmware-network
kernel-firmware-ti
kernel-firmware-sound
kernel-firmware-atheros
kernel-firmware-nfp
kernel-firmware-bnx2
kernel-firmware-qlogic
kernel-firmware-radeon
kernel-firmware-ath10k
kernel-firmware-i915
kernel-firmware-intel
kernel-firmware-mellanox
kernel-firmware-liquidio
kernel-firmware-mwifiex
kernel-firmware-marvell
kernel-firmware-chelsio
kernel-firmware-media
kernel-firmware-usb-network
kernel-firmware-nvidia
kernel-firmware-qcom

Install updates from vendor's website.

4th Gen AMD EPYC Processors - update to GenoaPI 1.0.0.0
3rd Gen AMD EPYC Processors - update to MilanPI 1.0.0.A
2nd Gen AMD EPYC Processors - update to RomePI 1.0.0.F
PowerFlex Appliance - update to IC-45.373.01
ProLiant DL325 Gen11 Server - update to 1.40_07-12-2023
ProLiant DL345 Gen11 - update to 1.40_07-12-2023
ProLiant DL365 Gen11 Server - update to 1.40_07-12-2023
ProLiant DL385 Gen11 - update to 1.40_07-12-2023
HPE ProLiant DL385 Gen10 Plus server - update to 2.84_08-17-2023
HPE ProLiant DL325 Gen10 Plus server - update to 2.84_08-17-2023
HPE ProLiant DL325 Gen10 Plus v2 server - update to 2.84_08-17-2023
HPE ProLiant DL365 Gen10 Plus server - update to 2.84_08-17-2023
HPE ProLiant DL345 Gen10 Plus server - update to 2.84_08-17-2023
HPE ProLiant DL385 Gen10 Plus v2 server - update to 2.84_08-17-2023
HPE ProLiant DX385 Gen10 Plus server - update to 2.84_08-17-2023
HPE ProLiant DX385 Gen10 Plus v2 server - update to 2.84_08-17-2023
HPE ProLiant XL225n Gen10 Plus 1U Node - update to 2.84_08-17-2023
HPE ProLiant XL645d Gen10 Plus Server - update to 2.84_08-17-2023
HPE ProLiant XL675d Gen10 Plus Server - update to 2.84_08-17-2023
HPE ProLiant DL385 Gen10 Server - update to 2.84_09-07-2023
HPE ProLiant DL325 Gen10 Server - update to 2.84_09-07-2023
PowerFlex rack - update to 3.7.3.1
Storage Resource Manager - update to 4.10.0.3
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
ucode-amd - addressed in versions 20190618-5.34.1, 20200107-150100.3.40.1, 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware - addressed in versions 20190618-5.34.1, 20200107-150100.3.40.1, 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-dpaa2 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ath11k - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-amdgpu - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-serial - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-realtek - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ueagle - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-prestera - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mediatek - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-all - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-brcm - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-platform - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-bluetooth - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-iwlwifi - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-network - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ti - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-sound - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-atheros - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-nfp - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-bnx2 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-qlogic - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-radeon - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-ath10k - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-i915 - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-intel - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mellanox - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-liquidio - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-mwifiex - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-marvell - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-chelsio - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-media - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-usb-network - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-nvidia - addressed in versions 20210208-150300.4.19.1, 20220509-150400.4.25.1, 20230724-150500.3.9.1
kernel-firmware-qcom - addressed in versions 20220509-150400.4.25.1, 20230724-150500.3.9.1

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3002.html

• Multiple vulnerabilities in AMD server processors
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• SUSE update for kernel-firmware
• Multiple vulnerabilities in Certain HPE ProLiant DL/DX/XL Server Using Certain AMD EPYC Processors, AMD-SB-3002, AMD Server
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• SUSE update for kernel-firmware
• Multiple vulnerabilities in Dell PowerFlex appliance
• Multiple vulnerabilities in Dell PowerFlex rack