CVE-2021-26323: Input Validation
Published Nov 16, 2021
·Updated
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
Affected Software
40 affected components
AMD Epyc 7232p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7232p
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7763
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713p
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7663
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7643
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 75f3
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543p
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7513
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 74f3
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443p
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7413
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 73f3
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7343
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313p
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 72f3
Event History
Nov 16, 2021
CVE Published
via MITRE·06:14 PM
Data Sourced
via MITRE·06:14 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-26323?
CVE-2021-26323 is a vulnerability that results in a potential impact to memory integrity due to failure to validate SEV commands while SNP is active.
2
What is the severity of CVE-2021-26323?
CVE-2021-26323 has a severity rating of 7.8 (high).
3
Which software is affected by CVE-2021-26323?
The affected software include AMD Epyc 7232p firmware (version romepi-sp3_1.0.0.c) and AMD Epyc 7763 firmware (version milanpi-sp3_1.0.0.4).
4
How can I fix CVE-2021-26323?
To fix CVE-2021-26323, it is recommended to apply the firmware updates provided by AMD. Please refer to the reference link for more information.
5
Where can I find more information about CVE-2021-26323?
You can find more information about CVE-2021-26323 on the official AMD Product Security Bulletin at the provided reference link.