VULNERABILITY INTELLIGENCE
CVE-2021-46778
CVSS score5.6 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2022-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
Weakness classification
- nvd@nist.gov: CWE-203
Primary references
- psirt@amd.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory