CVE-2021-26352

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-10 · updated 2026-06-17
Weakness: CWE-119

Description

Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.

Affected products

AMD Ryzen 3 5300G Firmware: all versions
AMD Ryzen 3 5300Ge Firmware: all versions
AMD Ryzen 5 2600 Firmware: all versions
AMD Ryzen 5 2600X Firmware: all versions
AMD Ryzen 5 2700 Firmware: all versions
AMD Ryzen 5 2700X Firmware: all versions
AMD Ryzen 5 3600 Firmware: all versions
AMD Ryzen 5 3600X Firmware: all versions
AMD Ryzen 5 5600G Firmware: all versions
AMD Ryzen 5 5600Ge Firmware: all versions
AMD Ryzen 5 5600X Firmware: all versions
AMD Ryzen 7 3700X Firmware: all versions
AMD Ryzen 7 3800X Firmware: all versions
AMD Ryzen 7 5700G Firmware: all versions
AMD Ryzen 7 5700Ge Firmware: all versions
AMD Ryzen 7 5800X Firmware: all versions
AMD Ryzen 9 3900X Firmware: all versions
AMD Ryzen 9 3950X Firmware: all versions
AMD Ryzen 9 5900X Firmware: all versions
AMD Ryzen 9 5950X Firmware: all versions
AMD Ryzen Threadripper 2920X Firmware: all versions
AMD Ryzen Threadripper 2950X Firmware: all versions
AMD Ryzen Threadripper 2970Wx Firmware: all versions
AMD Ryzen Threadripper 2990Wx Firmware: all versions
AMD Ryzen Threadripper 3970X Firmware: all versions
AMD Ryzen Threadripper Pro 5945Wx Firmware: all versions
AMD Ryzen Threadripper Pro 5955Wx Firmware: all versions
AMD Ryzen Threadripper Pro 5965Wx Firmware: all versions
AMD Ryzen Threadripper Pro 5975Wx Firmware: all versions
AMD Ryzen Threadripper Pro 5995Wx Firmware: all versions

References

Get alerted when CVE-2021-26352 or the next vulnerability affects your stack