CVE-2021-26327

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@amd.com

Published

2021-11-16

Last modified

2024-09-17

Weaknesses

CWE-20, CWE-668

Affected products

• 3rd Gen Amd Epyc (Amd)
• Epyc 7003 Firmware (Amd)
• Epyc 72f3 Firmware (Amd)
• Epyc 7313 Firmware (Amd)
• Epyc 7313p Firmware (Amd)
• Epyc 7343 Firmware (Amd)
• Epyc 73f3 Firmware (Amd)
• Epyc 7413 Firmware (Amd)
• Epyc 7443 Firmware (Amd)
• Epyc 7443p Firmware (Amd)
• Epyc 7453 Firmware (Amd)
• Epyc 74f3 Firmware (Amd)
• Epyc 7513 Firmware (Amd)
• Epyc 7543 Firmware (Amd)
• Epyc 7543p Firmware (Amd)
• Epyc 75f3 Firmware (Amd)
• Epyc 7643 Firmware (Amd)
• Epyc 7663 Firmware (Amd)
• Epyc 7713 Firmware (Amd)
• Epyc 7713p Firmware (Amd)
• Epyc 7763 Firmware (Amd)

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021