AMD Secure Processor TEE - Secure OS stack overrun (AMD-SB-3003): A stack overrun in the ASP Secure OS trusted

CVSS 5.2CVE-2021-46746Firmware, BMC & network fabriccurated

Impact

A stack overrun in the ASP Secure OS trusted execution environment, denying service to the secure processor. With the ASP down, the platform loses fTPM services, SEV key operations and attestation - so on a confidential-computing host this is not a cosmetic crash, it takes your CVM capacity offline until the node is power-cycled.

Who can reach it

Local, through the ASP TEE interface.

What to do

Fixed in AMD PI/AGESA firmware and delivered only as an OEM SBIOS package - AMD ships the PI drop to Dell, HPE, Supermicro, Lenovo and the ODMs, who each requalify before releasing BIOS. **Budget one to six months of OEM lag**, and note that several CVEs in this batch are marked 'no fix planned' on Naples (EPYC 7001) - for those the only remediation is retiring the hardware. Applying it means cordon, drain and a full power cycle per node; there is no driver reload, no live patch and no VBIOS step.

References

https://nvd.nist.gov/vuln/detail/CVE-2021-46746 https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.