CVE-2021-26352: AMD Ryzen 3 5300g Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.

Affected products

• AMD Ryzen 3 5300g Firmware: affected versions not specified
• AMD Ryzen 3 5300ge Firmware: affected versions not specified
• AMD Ryzen 5 2600 Firmware: affected versions not specified
• AMD Ryzen 5 2600x Firmware: affected versions not specified
• AMD Ryzen 5 2700 Firmware: affected versions not specified
• AMD Ryzen 5 2700x Firmware: affected versions not specified
• AMD Ryzen 5 3600 Firmware: affected versions not specified
• AMD Ryzen 5 3600x Firmware: affected versions not specified
• AMD Ryzen 5 5600g Firmware: affected versions not specified
• AMD Ryzen 5 5600ge Firmware: affected versions not specified
• AMD Ryzen 5 5600x Firmware: affected versions not specified
• AMD Ryzen 7 3700x Firmware: affected versions not specified
• AMD Ryzen 7 3800x Firmware: affected versions not specified
• AMD Ryzen 7 5700g Firmware: affected versions not specified
• AMD Ryzen 7 5700ge Firmware: affected versions not specified
• AMD Ryzen 7 5800x Firmware: affected versions not specified
• AMD Ryzen 9 3900x Firmware: affected versions not specified
• AMD Ryzen 9 3950x Firmware: affected versions not specified
• AMD Ryzen 9 5900x Firmware: affected versions not specified
• AMD Ryzen 9 5950x Firmware: affected versions not specified
• AMD Ryzen Threadripper 2920x Firmware: affected versions not specified
• AMD Ryzen Threadripper 2950x Firmware: affected versions not specified
• AMD Ryzen Threadripper 2970wx Firmware: affected versions not specified
• AMD Ryzen Threadripper 2990wx Firmware: affected versions not specified
• AMD Ryzen Threadripper 3970x Firmware: affected versions not specified
• and 5 more

Published 2022-05-10. Last modified 2026-06-17.