CVE-2021-26353: amd 3rd gen epyc Improper Initialization

Vulnerability summary

CVE-2021-26353 is a high (CVSS 7.8) Improper Initialization vulnerability in amd 3rd gen epyc. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 17.8% of scored vulnerabilities.

Timeline

1. 10-05-2022
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.

• CWE-665Improper InitializationThe product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.