CVE-2021-26318: Side-channels Related to the x86 PREFETCH Instruction
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-26318?
CVE-2021-26318 has been classified with a high severity due to its potential to leak sensitive kernel address space information.
How do I fix CVE-2021-26318?
To mitigate CVE-2021-26318, users should apply the latest firmware updates provided by AMD for their affected CPUs.
Which AMD CPUs are affected by CVE-2021-26318?
CVE-2021-26318 affects specific AMD firmware versions, particularly those associated with AMD Athlon, Athlon Pro, EPYC, and Ryzen.
How does CVE-2021-26318 exploit kernel address space?
CVE-2021-26318 exploits a timing and power-based side channel through x86 PREFETCH instructions, enabling potential information leakage.
Is there a workaround for CVE-2021-26318?
Currently, the recommended workaround for CVE-2021-26318 is to ensure that all affected systems are promptly updated to the latest firmware versions.