CVE-2021-26342 : In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TL

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

Published 2022-05-11 17:15:08

Updated 2022-05-19 20:05:04

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2021-26342

AMD » Epyc 7601 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7601 » Version: N/A
AMD » Epyc 7551p Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551p » Version: N/A
AMD » Epyc 7551 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7551 » Version: N/A
AMD » Epyc 7501 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7501 » Version: N/A
AMD » Epyc 7451 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7451 » Version: N/A
AMD » Epyc 7401 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401 » Version: N/A
AMD » Epyc 7371 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7371 » Version: N/A
AMD » Epyc 7351p Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351p » Version: N/A
AMD » Epyc 7351 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7351 » Version: N/A
AMD » Epyc 7301 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7301 » Version: N/A
AMD » Epyc 7281 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7281 » Version: N/A
AMD » Epyc 7261 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7261 » Version: N/A
AMD » Epyc 7251 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7251 » Version: N/A
AMD » Epyc 7763 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7763 » Version: N/A
AMD » Epyc 7713p Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713p » Version: N/A
AMD » Epyc 7713 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7713 » Version: N/A
AMD » Epyc 7663 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7663 » Version: N/A
AMD » Epyc 7643 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7643 » Version: N/A
AMD » Epyc 75f3 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 75f3 » Version: N/A
AMD » Epyc 7543p Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543p » Version: N/A
AMD » Epyc 7543 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7543 » Version: N/A
AMD » Epyc 7513 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7513 » Version: N/A
AMD » Epyc 7453 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7453 » Version: N/A
AMD » Epyc 74f3 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 74f3 » Version: N/A
AMD » Epyc 7443p Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443p » Version: N/A
AMD » Epyc 7443 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7443 » Version: N/A
AMD » Epyc 7413 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7413 » Version: N/A
AMD » Epyc 73f3 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 73f3 » Version: N/A
AMD » Epyc 7343 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7343 » Version: N/A
AMD » Epyc 7313p Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313p » Version: N/A
AMD » Epyc 7313 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7313 » Version: N/A
AMD » Epyc 72f3 Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 72f3 » Version: N/A
AMD » Epyc 7001 Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7001 » Version: N/A
AMD » Epyc 7401p Firmware
Versions before (<) naplespi-sp3_1.0.0.h
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7401p » Version: N/A
AMD » Epyc 7773x Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7773x » Version: N/A
AMD » Epyc 7473x Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7473x » Version: N/A
AMD » Epyc 7573x Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7573x » Version: N/A
AMD » Epyc 7373x Firmware
Versions before (<) milanpi-sp3_1.0.0.7
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Epyc 7373x » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-26342

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-26342

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

References for CVE-2021-26342

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028

AMD Server Vulnerabilities - May 2022 | AMD
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-26342

Products affected by CVE-2021-26342

Exploit prediction scoring system (EPSS) score for CVE-2021-26342

CVSS scores for CVE-2021-26342

References for CVE-2021-26342