Skip to content
Fencer Intel
medium 4.7

CVE-2021-26350 json

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in…

published 4y ago modified 4mo ago also EUVD-2021-13156

cvss
4.7
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 3%
public exploits
0
none known

Summary

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.

Patch / fix

  • amd epyc_7232p_firmware romepi-sp3_1.0.0.d
  • amd epyc_7302p_firmware romepi-sp3_1.0.0.d
  • amd epyc_7402p_firmware romepi-sp3_1.0.0.d
  • amd epyc_7502p_firmware romepi-sp3_1.0.0.d
  • amd epyc_7702p_firmware romepi-sp3_1.0.0.d
  • amd epyc_7252_firmware romepi-sp3_1.0.0.d
  • amd epyc_7262_firmware romepi-sp3_1.0.0.d
  • amd epyc_7272_firmware romepi-sp3_1.0.0.d
  • amd epyc_7282_firmware romepi-sp3_1.0.0.d
  • amd epyc_7302_firmware romepi-sp3_1.0.0.d
  • amd epyc_7352_firmware romepi-sp3_1.0.0.d
  • amd epyc_7402_firmware romepi-sp3_1.0.0.d
  • amd epyc_7452_firmware romepi-sp3_1.0.0.d
  • amd epyc_7502_firmware romepi-sp3_1.0.0.d
  • amd epyc_7532_firmware romepi-sp3_1.0.0.d
  • amd epyc_7542_firmware romepi-sp3_1.0.0.d
  • amd epyc_7552_firmware romepi-sp3_1.0.0.d
  • amd epyc_7642_firmware romepi-sp3_1.0.0.d
  • amd epyc_7662_firmware romepi-sp3_1.0.0.d
  • amd epyc_7702_firmware romepi-sp3_1.0.0.d
  • kernel-firmware SLE Module for Basesystem 15 SP4, openSUSE Leap 15.4 20220509-150400.4.5.1
  • kernel-firmware SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 20191118-150000.3.42.1
  • kernel-firmware SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +3 more 20190618-5.25.2
  • kernel-firmware SLE Module for Basesystem 15 SP3, SLE Micro 5.2, SLE Micro 5.1 +1 more 20210208-150300.4.10.1
  • kernel-firmware SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES 15 SP2-LTSS +12 more 20200107-150100.3.31.1

suse advisories SUSE-SU-2022:1923-1SUSE-SU-2022:1847-1SUSE-SU-2022:1846-1SUSE-SU-2022:1840-1SUSE-SU-2022:1751-1

Is CVE-2021-26350 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.14% chance of exploitation in the next 30 days, higher than 3% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 1.9 AV:L/AC:M/Au:N/C:N/I:N/A:P

Affected products

  • AMD EPYC™ Processors

Classification

Weakness
  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.