Speculative Load Disordering

Bulletin ID: AMD-SB-1035
Potential Impact: Data Leakage
Severity: Low

Summary

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.

CVE Details

CVE-2021-26400

AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared memory, resulting in potential data leakage.

Affected Products

All Currently supported CPU Products in conjunction with software vulnerabilities relating to speculative execution as indicated above. 

Mitigation

No new mitigations.

Please reference the Architecture Programmer’s Manual Vol 2. Section 7.1.1 Read Ordering and 7.1.3 Read/Write Barriers.   

Acknowledgement

CVE-2021-26400:  AMD thanks Danping Li and Ziyuan Zhu from the Institute of Information Engineering, Chinese Academy of Sciences for reporting this issue and engaging in coordinated vulnerability disclosure.

References

Architecture Programmer’s Manual Vol 2.

Revisions

 DISCLAIMER

The information contained herein is for informational purposes only and is subject to change without notice. While every precaution has been taken in the preparation of this document, it may contain technical inaccuracies, omissions, and typographical errors, and AMD is under no obligation to update or otherwise correct this information. Advanced Micro Devices, Inc. makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and assumes no liability of any kind, including the implied warranties of non-infringement, merchantability, or fitness for particular purposes, with respect to the operation or use of AMD hardware, software or other products described herein. Any computer system has risks of security vulnerabilities that cannot be completely prevented or mitigated. No license, including implied or arising by estoppel, to any intellectual property rights is granted by this document. Terms and limitations applicable to the purchase or use of AMD’s products are as set forth in a signed agreement between the parties or in AMD's Standard Terms and Conditions of Sale.

AMD, the AMD Arrow logo, and combinations thereof are trademarks of Advanced Micro Devices, Inc. Other product names used in this publication are for identification purposes only and may be trademarks of their respective companies.

© 2022 Advanced Micro Devices, Inc. All rights reserved.