Low severity · published May 11, 2022
CVE-2021-26342
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine…
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
E7
Epyc 7001 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7251 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7261 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7281 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 72f3 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7301 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7313 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7313p Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7343 Firmware · Amd
before milanpi-sp3_1.0.0.7 · source: NVD
E7
Epyc 7351 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7351p Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
E7
Epyc 7371 Firmware · Amd
before naplespi-sp3_1.0.0.h · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26342
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26342
Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028
More from Epyc 7001 Firmware
8.4
CVE-2021-26340
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in…
7.8
CVE-2021-26398
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which…
7.8
CVE-2021-26335
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation…
7.8
CVE-2021-26331
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution
7.5
CVE-2021-46774
Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in…