Hi, this website uses essential cookies to ensure its proper operation, analytical cookies to improve its functionality, and tracking cookies to understand how you interact with it. The non-essential cookies will be set only after consent.

Name

These cookies allow us and our third-party service providers to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us improve how our website works by, for example, ensuring that users can easily find what they need on our website. These cookies generate aggregate statistics that are not associated with an individualized profile.

Performance and Analytics cookies

Our website requires the use of these cookies to properly operate or provide necessary functions relating to the services you request. They include, for example, cookies enabling us to track your preferences and allow third party embed functionality.

Strictly necessary cookies

With up to 192 cores,  AmpereOne® is the next generation of Cloud Native Processors for sustainable compute.

AmpereOne® Product Brief

Processors

Partners

Product Security

Where to Buy

Where to Try

Products

We have created a new class of GPU-free AI inferencing that delivers the best price/performance for many AI models.

Ampere AI Solutions

Solutions Center

Artificial Intelligence

ARM Native Apps

Data Analytics

Edge and Embedded

Media Services

Storage

Web Services

Solutions

How FreeBSD Employs Ampere Arm64 Servers in the Data Center

Ampere in the Wild:

Developer Center

Design

Build

Deploy

Power Your AI

Working with Open Source

Ampere Ready Software

Community Forum

Subscribe to Newsletter

Developers

The Data Center Dilemma: Balancing Growth, Efficiency & Environmental Impact

Blog

Events

Webinars

Case Studies

Blogs

Ampere YouTube

Briefs

Tutorials

Tuning Guides

Resources

Sandy Dash Engineer on the Silicon Validation team

Meet the Team at Ampere:

About Us

Leadership Team

Newsroom

Careers

Contact Us

Contact Sales

Company

## Root Complex OS Re-Enable
**Bulletin ID:** AMP-SB-0006      
[CVE-2022-46892](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46892)

### Who is Impacted

Systems that use OS to disable root port.
### Potential Impact

Depending on platform configuration, reenabling root ports may provide unintended access.

### Severity:
Low Severity

CVSS Score: 3.6

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

### Problem Statement and Impact

A Root complex is typically disabled during boot via the BIOS. However, the OS can overwrite the DSDT ACPI table to reinitialize the Root Complex. Reported by Oracle and discovered by internal Oracle security researcher Hugo Magalhaes.

### Fixed in

SRP 2.10c
 
### Affected Products

Ampere® Altra® and Ampere® Altra®Max

### Recommendations

Update SRP to 2.10c

Root Complex OS Re-Enable. Systems that use OS to disable root port. Depending on platform configuration, re-enabling root ports may provide unintended access.

Root Complex OS Re-Enable

Ampere Computing Microprocessors for greater efficiency