CVE-2021-46755

Published: May 9, 2023

Modified: Jan 28, 2025

PUBLISHED

Description

Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious bootloader to exhaust the SysHub resources resulting in a potential denial of service.

Vendor	Product	Versions
AMD	Ryzen™ 3000 Series Desktop Processors “Matisse” AM4	affected `various`
AMD	AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4	affected `various`
AMD	Ryzen™ 5000 Series Desktop processor with Radeon™ Graphics “Cezanne” AM4	affected `various`
AMD	3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT	affected `various`
AMD	Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS	affected `various`
AMD	Ryzen™ Threadripper™ PRO Processors “Chagall” WS	affected `various`
AMD	Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir”	affected `various`
AMD	Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne”	affected `various`
AMD	Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”	affected `various`

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2021-46755

Description

Affected Products

References