CVE-2021-26364

Description

Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which could result in an exception handling leading to a potential denial of service.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.068

Associated Vulnerability

Vulnerability	OS Platform
SUSE-SU-2022:1846-1(SUSE Linux Enterprise Server 12-SP5 ) kernel-firmware-20190618-5.25.2.noarch.rpm	Linux
SUSE-SU-2022:1846-1(SUSE Linux Enterprise Server 12-SP5 ) ucode-amd-20190618-5.25.2.noarch.rpm	Linux
SUSE-SU-2022:1840-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) ucode-amd-20210208-150300.4.10.1.noarch.rpm	Linux
SUSE-SU-2022:1840-1(SUSE Linux Enterprise Module for Basesystem 15-SP3 ) kernel-firmware-20210208-150300.4.10.1.noarch.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234