CVE-2021-26339

MEDIUM5.5

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service

Published May 11, 2022

Modified 1 years ago

Details

A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.

References

WEB

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

WEB

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2021-26339

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector