x86-64.net

Processor errata

AMD processor errata

AMD processor bugs with a CVE that are not side channels: hangs, machine checks and microcode flaws, from the erratum 793 of 2013 on.

Kind
Other
CVEs
15
Published
2013–2026

The oldest two predate AMD’s own CVE numbering: other numbering authorities assigned them from public reports. Each AMD bulletin below lists its CVEs.

Some are in parts of the chip beside the cores: the IOMMU, the integrated chipset, PCIe, the debug interfaces and the audio and graphics blocks.

CVEs

CVENameVendorsPublished
CVE-2013-6885Erratum 793AMD2013-11-29
CVE-2017-7262FMA3 hang on early Ryzen (described below)AMD2017-03-25
CVE-2020-12988Chipset hang on reboot (described below)AMD2021-06-11
CVE-2021-26312IOMMU TLB not flushed (described below)AMD2021-11-16
CVE-2021-26339Core hang from a guest (described below)AMD2022-05-11
CVE-2021-26348IOMMU TLB not flushed (second CVE) (described below)AMD2022-05-11
CVE-2021-26382ACP firmware signing key (described below)AMD2022-07-14
CVE-2022-23826Graphics interface register race (described below)AMD2026-05-15
CVE-2023-31364Guest-initiated machine check errors (described below)AMD2026-02-26
CVE-2024-21961PCIe link buffer from a guest (described below)AMD2026-02-12
CVE-2024-36315LFENCE serialization (described below)AMD2026-05-13
CVE-2025-0040JTAG to AXI access (described below)AMD2026-05-15
CVE-2025-52533On-chip debug interface (described below)AMD2026-02-12
CVE-2025-52534Microcode bound check (described below)AMD2026-02-10
CVE-2025-54514Shared resources on the SoC (described below)AMD2026-02-10

CVEs without a page of their own

The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.

CVE-2017-7262: FMA3 hang on early Ryzen

A long series of FMA3 instructions could hang Ryzen processors with AGESA microcode up to 2017-01-27, as a floating-point test suite showed. Source. CVE record (2017-03-25).

CVE-2020-12988: Chipset hang on reboot

A flaw in the integrated chipset of EPYC let an attacker hang the system when it is rebooted. AMD-SB-1021. Source. CVE record (2021-06-11).

CVE-2021-26312: IOMMU TLB not flushed

The IOMMU's TLB was not flushed when it should be, so a device could write memory it should no longer reach. AMD-SB-1021. Source. CVE record (2021-11-16).

CVE-2021-26339: Core hang from a guest

A bug in the core logic of 3rd generation EPYC lets specific code in an unprivileged guest hang a core; fixed in MilanPI 1.0.0.7. AMD-SB-1028. Source. CVE record (2022-05-11).

CVE-2021-26348: IOMMU TLB not flushed (second CVE)

A second CVE for an IOMMU TLB that was not flushed, so a device could write memory it should not reach. AMD-SB-1027. Source. CVE record (2022-05-11).

CVE-2021-26382: ACP firmware signing key

The Audio Co-Processor accepted any firmware AMD signed, even with a key not meant for ACP firmware. AMD-SB-1027. Source. CVE record (2022-07-14).

CVE-2022-23826: Graphics interface register race

A race in the graphics interface let an attacker reload registers between check and use. AMD-SB-4017. Source. CVE record (2026-05-15).

CVE-2023-31364: Guest-initiated machine check errors

A guest that floods its host with malformed writes through the IOMMU can cause a fatal machine check on EPYC; fixed in PI firmware in 2025. AMD-SB-7059. Source. CVE record (2026-02-26).

CVE-2024-21961: PCIe link buffer from a guest

A memory buffer flaw in the PCIe link let an attacker in a guest stop the host. AMD-SB-3023. Source. CVE record (2026-02-12).

CVE-2024-36315: LFENCE serialization

LFENCE did not always serialize as specified, so speculation barriers could be bypassed and data leaked. AMD-SB-3030. Source. CVE record (2026-05-13).

CVE-2025-0040: JTAG to AXI access

Weak access control between JTAG and AXI let an attacker with physical access read or write cross-chip debug registers. AMD-SB-4017. Source. CVE record (2026-05-15).

CVE-2025-52533: On-chip debug interface

Weak access control let a privileged attacker enable an on-chip debug interface. AMD-SB-3023. Source. CVE record (2026-02-12).

CVE-2025-52534: Microcode bound check

An improper bound check in microcode lets a malicious guest write to host memory on EPYC 9005 (Turin Dense); fixed in TurinPI 1.0.0.6. AMD-SB-3023. Source. CVE record (2026-02-10).

CVE-2025-54514: Shared resources on the SoC

Poor isolation of shared resources on the chip let a privileged attacker harm integrity somewhat. AMD-SB-3023. Source. CVE record (2026-02-10).

Advisories

AMD-SB-6027: AMD Graphics Vulnerabilities - May 2026

2026-05-12. CVE-2021-26380, CVE-2021-46747, CVE-2022-23817, CVE-2022-23826, CVE-2023-31316, CVE-2025-0040, CVE-2025-0044

AMD-SB-4017: AMD Athlon, AMD Ryzen, and AMD Ryzen Embedded Series Processor Vulnerabilities - May 2026

2026-05-12. CVE-2021-26380, CVE-2021-46747, CVE-2022-23826, CVE-2023-31316, CVE-2024-36315, CVE-2024-36343, CVE-2024-36345, CVE-2025-0040, CVE-2025-48516, CVE-2026-0438

AMD-SB-3030: AMD EPYC and AMD EPYC Embedded Series Processor Vulnerabilities - May 2026

2026-05-12. CVE-2024-36315, CVE-2024-36343, CVE-2024-36345, CVE-2025-61971, CVE-2025-61972, CVE-2026-0438

AMD-SB-4013: AMD Athlon and AMD Ryzen Processor Vulnerabilities - February 2026

2026-02-10. CVE-2021-26381, CVE-2021-26410, CVE-2023-20540, CVE-2024-21953, CVE-2024-21961, CVE-2024-36310, CVE-2024-36311, CVE-2024-36355, CVE-2025-0012, CVE-2025-0029, CVE-2025-0031, CVE-2025-29939, CVE-2025-29946, CVE-2025-29948, CVE-2025-29949, CVE-2025-29950, CVE-2025-29951, CVE-2025-29952, CVE-2025-48509, CVE-2025-48514, CVE-2025-48515, CVE-2025-48517, CVE-2025-52533, CVE-2025-52534, CVE-2025-52536, CVE-2025-54514

AMD-SB-1027: AMD Client Vulnerabilities - May 2022

2022-05-10. CVE-2020-12944, CVE-2020-12946, CVE-2020-12951, CVE-2021-26312, CVE-2021-26317, CVE-2021-26335, CVE-2021-26336, CVE-2021-26337, CVE-2021-26339, CVE-2021-26347, CVE-2021-26348, CVE-2021-26349, CVE-2021-26350, CVE-2021-26351, CVE-2021-26352, CVE-2021-26353, CVE-2021-26361, CVE-2021-26362, CVE-2021-26363, CVE-2021-26366, CVE-2021-26368, CVE-2021-26369, CVE-2021-26370, CVE-2021-26372, CVE-2021-26373, CVE-2021-26375, CVE-2021-26376, CVE-2021-26378, CVE-2021-26382, CVE-2021-26384, CVE-2021-26386, CVE-2021-26388, CVE-2021-26390, CVE-2021-39298, CVE-2021-46771, CVE-2023-20558, CVE-2023-20559

AMD-SB-1021: AMD Server Vulnerabilities - November 2021

2021-11-08. CVE-2020-12944, CVE-2020-12946, CVE-2020-12951, CVE-2020-12954, CVE-2020-12961, CVE-2020-12988, CVE-2021-26312, CVE-2021-26315, CVE-2021-26320, CVE-2021-26321, CVE-2021-26322, CVE-2021-26323, CVE-2021-26324, CVE-2021-26325, CVE-2021-26326, CVE-2021-26327, CVE-2021-26329, CVE-2021-26330, CVE-2021-26331, CVE-2021-26332, CVE-2021-26335, CVE-2021-26336, CVE-2021-26337, CVE-2021-26338, CVE-2021-26351, CVE-2021-26352, CVE-2021-26353, CVE-2021-26370, CVE-2021-26390, CVE-2021-26408, CVE-2021-46771

AMD-SB-7059: Guest Initiated Machine Check Errors

CVE-2023-31364

AMD-SB-3023: AMD EPYC and AMD EPYC Embedded Series Processor Vulnerabilities - February 2026

CVE-2024-21953, CVE-2024-21961, CVE-2024-36310, CVE-2024-36311, CVE-2024-36355, CVE-2025-0012, CVE-2025-0029, CVE-2025-0031, CVE-2025-29939, CVE-2025-29946, CVE-2025-29948, CVE-2025-29950, CVE-2025-29952, CVE-2025-48509, CVE-2025-48514, CVE-2025-48517, CVE-2025-52533, CVE-2025-52534, CVE-2025-52536, CVE-2025-54514

AMD-SB-1028: AMD Server Vulnerabilities - May 2022

CVE-2021-26312, CVE-2021-26339, CVE-2021-26342, CVE-2021-26347, CVE-2021-26348, CVE-2021-26349, CVE-2021-26350, CVE-2021-26364, CVE-2021-26372, CVE-2021-26373, CVE-2021-26375, CVE-2021-26376, CVE-2021-26378, CVE-2021-26388

Sources

  1. CVE record CVE-2013-6885
  2. CVE record CVE-2017-7262
  3. AMD-SB-1028: AMD Server Vulnerabilities - May 2022
  4. AMD-SB-7059: Guest Initiated Machine Check Errors
  5. AMD-SB-3023: AMD EPYC and AMD EPYC Embedded Series Processor Vulnerabilities - February 2026
  6. AMD-SB-6027: AMD Graphics Vulnerabilities - May 2026
  7. AMD-SB-4017: AMD Athlon, AMD Ryzen, and AMD Ryzen Embedded Series Processor Vulnerabilities - May 2026
  8. AMD-SB-3030: AMD EPYC and AMD EPYC Embedded Series Processor Vulnerabilities - May 2026
  9. AMD-SB-4013: AMD Athlon and AMD Ryzen Processor Vulnerabilities - February 2026
  10. AMD-SB-1027: AMD Client Vulnerabilities - May 2022
  11. AMD-SB-1021: AMD Server Vulnerabilities - November 2021