CVE-2022-46892: Amperecomputing Ampere Altra Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.

Affected products

• Amperecomputing Ampere Altra Firmware: before 2.10c (fixed in 2.10c)
• Amperecomputing Ampere Altra Max Firmware: before 2.10c (fixed in 2.10c)

Published 2023-02-15. Last modified 2026-06-17.