Base Score

MEDIUM5.6

CVE-2021-26401

LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.

VectorLOCAL

Published Bypsirt@amd.com

Published DateMar 11, 2022, 18:15

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

5.6

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

NONE

References

http://www.openwall.com/lists/oss-security/2022/03/18/2
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1036

Base Score

MEDIUM5.6

Weakness Type (CWE):NVD-CWE-noinfo

CVSS Metrics

Base Score

5.6

Vector String

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

CHANGED

Confidentiality (C)

HIGH

Integrity (I)

NONE

Availability (A)

NONE