CVE-2021-26318

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.

Score

CVSS 3.1 4.7 Medium

Status

Modified - psirt@amd.com

Published

2021-10-13

Last modified

2024-09-16

Weaknesses

CWE-203, CWE-208

Affected products

• All Supported Processors (Amd)
• Athlon Firmware (Amd)
• Athlon Pro Firmware (Amd)
• Epyc Firmware (Amd)
• Ryzen Firmware (Amd)
• Ryzen Pro Firmware (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1017