CVE-2021-26326: High severity AMD Epyc 7232p Firmware vulnerability
Published Nov 16, 2021
·Updated
Failure to validate VMHSAVEPA during SNPINIT may result in a loss of memory integrity.
Affected Software
40 affected components
AMD Epyc 7232p Firmware<romepi-sp3_1.0.0.c
AMD Epyc 7232p
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7763
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713p
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7663
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7643
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 75f3
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543p
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7513
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 74f3
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443p
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7413
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 73f3
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7343
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313p
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 72f3
Event History
Nov 16, 2021
CVE Published
via MITRE·05:52 PM
Data Sourced
via MITRE·05:52 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26326?
CVE-2021-26326 has been classified as a high-severity vulnerability due to its potential impact on memory integrity.
2
How do I fix CVE-2021-26326?
To fix CVE-2021-26326, you should update your AMD EPYC firmware to the latest version specified in the AMD security bulletin.
3
What software is affected by CVE-2021-26326?
CVE-2021-26326 primarily affects various versions of AMD EPYC firmware up to romepi-sp3_1.0.0.c.
4
Can CVE-2021-26326 be exploited remotely?
Yes, CVE-2021-26326 may allow an attacker to exploit vulnerable systems remotely due to improper validation during initialization.
5
Is there a workaround for CVE-2021-26326?
Currently, the best approach for mitigating CVE-2021-26326 is to apply the firmware updates as there are no effective workarounds provided.