Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-46778

Date: August 10, 2022

Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.

Severity Score

Related Resources (4)

https://nvd.nist.gov/vuln/detail/CVE-2021-46778
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1039
https://access.redhat.com/security/cve/CVE-2021-46778
https://www.mend.io/vulnerability-database/CVE-2021-46778

Severity Score

Weakness Type (CWE)

Observable Discrepancy

CWE-203

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): HIGH
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us