CVE-2021-26323: Input Validation
First published: Tue Nov 16 2021(Updated: )
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
Credit: psirt@amd.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| AMD EPYC 7232p firmware | <romepi-sp3_1.0.0.c | |
| AMD EPYC 7232p firmware | ||
| AMD EPYC 7763 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7763 Firmware | ||
| AMD EPYC 7713P Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7713P Firmware | ||
| AMD EPYC 7713P Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7713 | ||
| AMD EPYC 7663 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7663 Firmware | ||
| AMD EPYC 7643 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7643 | ||
| AMD EPYC 75F3 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 75F3 | ||
| AMD EPYC 7543P Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7543P Firmware | ||
| Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7543 Firmware | ||
| AMD EPYC 7513 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7513 | ||
| Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7453 | ||
| AMD EPYC 74F3 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 74F3 | ||
| AMD EPYC 7443P Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7443P | ||
| AMD EPYC 7443 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7443 | ||
| AMD EPYC 7413 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7413 Firmware | ||
| AMD EPYC 73F3 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 73F3 | ||
| Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7343 | ||
| AMD EPYC 7313P Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7313P | ||
| Amd Epyc Server Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 7313P | ||
| AMD EPYC 72F3 Firmware | <milanpi-sp3_1.0.0.4 | |
| AMD EPYC 72F3 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-26323?
CVE-2021-26323 is a vulnerability that results in a potential impact to memory integrity due to failure to validate SEV commands while SNP is active.
What is the severity of CVE-2021-26323?
CVE-2021-26323 has a severity rating of 7.8 (high).
Which software is affected by CVE-2021-26323?
The affected software include AMD Epyc 7232p firmware (version romepi-sp3_1.0.0.c) and AMD Epyc 7763 firmware (version milanpi-sp3_1.0.0.4).
How can I fix CVE-2021-26323?
To fix CVE-2021-26323, it is recommended to apply the firmware updates provided by AMD. Please refer to the reference link for more information.
Where can I find more information about CVE-2021-26323?
You can find more information about CVE-2021-26323 on the official AMD Product Security Bulletin at the provided reference link.
- agent/type
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/amd
- canonical/amd epyc 7232p firmware
- canonical/amd epyc 7763 firmware
- canonical/amd epyc 7713p firmware
- canonical/amd epyc 7713
- canonical/amd epyc 7663 firmware
- canonical/amd epyc 7643 firmware
- canonical/amd epyc 7643
- canonical/amd epyc 75f3 firmware
- canonical/amd epyc 75f3
- canonical/amd epyc 7543p firmware
- canonical/amd epyc server firmware
- canonical/amd epyc 7543 firmware
- canonical/amd epyc 7513 firmware
- canonical/amd epyc 7513
- canonical/amd epyc 7453
- canonical/amd epyc 74f3 firmware
- canonical/amd epyc 74f3
- canonical/amd epyc 7443p firmware
- canonical/amd epyc 7443p
- canonical/amd epyc 7443 firmware
- canonical/amd epyc 7443
- canonical/amd epyc 7413 firmware
- canonical/amd epyc 73f3 firmware
- canonical/amd epyc 73f3
- canonical/amd epyc 7343
- canonical/amd epyc 7313p firmware
- canonical/amd epyc 7313p
- canonical/amd epyc 72f3 firmware