CVE-2021-46778: amd amd processors Observable Discrepancy

Vulnerability summary

CVE-2021-46778 is a medium (CVSS 5.6) Observable Discrepancy vulnerability in amd amd processors. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 12.9% of scored vulnerabilities.

Timeline

1. 09-08-2022
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

• CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.