VDB
CVE-2021-26375
CVE-2021-26375
PUBLISHED
Reported by amd · Published May 11, 2022
Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address space that could result in denial of service.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ryzen_3_2300u_firmware | amd | raven-fp5-am4_1.1.0.e, pinnaclepi-am4_1.0.0.c_(rv1), picassopi-fp5_1.0.0.d, comboam4v2_pi_1.2.0.6c, comboam4pi_1.0.0.8 |
| ryzen_threadripper_pro_5955wx_firmware | amd | castlepeakwspi-swrx8_1.0.0.9 |
| epyc_7352_firmware | amd | romepi-sp3_1.0.0.d |
| epyc_7702_firmware | amd | romepi-sp3_1.0.0.d |
| epyc_7402_firmware | amd | romepi-sp3_1.0.0.d |
| epyc_75f3_firmware | amd | milanpi-sp3_1.0.0.7 |
| epyc_7573x_firmware | amd | milanpi-sp3_1.0.0.7 |
| epyc_7302_firmware | amd | romepi-sp3_1.0.0.d |
| ryzen_threadripper_2920x_firmware | amd | summitpi-sp3r2_1.1.0.5, castlepeakpi-sp3r3_1.0.0.7 |
| ryzen_threadripper_2990wx_firmware | amd | summitpi-sp3r2_1.1.0.5, castlepeakpi-sp3r3_1.0.0.7 |
| epyc_7413_firmware | amd | milanpi-sp3_1.0.0.7 |
| ryzen_5_5500_firmware | amd | comboam4_v2_pi_1.2.0.6c |
33 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| AMD | EPYC™ Processors | various |
| AMD | Ryzen™ Series | various |
| AMD | Athlon™ Series | various |
| AMD | Ryzen™ Series | * |
| AMD | Athlon™ Series | * |
| AMD | EPYC™ Processors | * |
Timeline
- May 10, 2022 CVE Published
- May 12, 2022 EPSS Score (30 in total, the first dated here)
- Mar 17, 2026 Security Advisory (20 in total, the first dated here)
- Jun 17, 2026 CVE Updated
- Aug 8, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2021-26375
vulnetix vdb fixes CVE-2021-26375Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-26375/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart