CVE-2021-46778

Severity: medium (CVSS 5.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-10 · updated 2026-06-17
Weakness: CWE-203

Description

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

Affected products

AMD Athlon 3050Ge Firmware: all versions
AMD Athlon 3150G Firmware: all versions
AMD Athlon 3150Ge Firmware: all versions
AMD Epyc 7001 Firmware: all versions
AMD Epyc 7002 Firmware: all versions
AMD Epyc 7003 Firmware: all versions
AMD Epyc 7232P Firmware: all versions
AMD Epyc 7251 Firmware: all versions
AMD Epyc 7252 Firmware: all versions
AMD Epyc 7261 Firmware: all versions
AMD Epyc 7262 Firmware: all versions
AMD Epyc 7272 Firmware: all versions
AMD Epyc 7281 Firmware: all versions
AMD Epyc 7282 Firmware: all versions
AMD Epyc 72F3 Firmware: all versions
AMD Epyc 7301 Firmware: all versions
AMD Epyc 7302 Firmware: all versions
AMD Epyc 7302P Firmware: all versions
AMD Epyc 7313 Firmware: all versions
AMD Epyc 7313P Firmware: all versions
AMD Epyc 7343 Firmware: all versions
AMD Epyc 7351 Firmware: all versions
AMD Epyc 7351P Firmware: all versions
AMD Epyc 7352 Firmware: all versions
AMD Epyc 7371 Firmware: all versions
AMD Epyc 7373X Firmware: all versions
AMD Epyc 73F3 Firmware: all versions
AMD Epyc 7401 Firmware: all versions
AMD Epyc 7401P Firmware: all versions
AMD Epyc 7402 Firmware: all versions

References

Get alerted when CVE-2021-46778 or the next vulnerability affects your stack