What is CVE-2021-26327?

CVE-2021-26327 is a vulnerability that involves insufficient validation of guest context in the SNP Firmware, which could potentially lead to a loss of guest confidentiality.

What is the severity of CVE-2021-26327?

The severity of CVE-2021-26327 is medium with a severity value of 5.5.

What software is affected by CVE-2021-26327?

The affected software includes Amd Epyc 7003 Firmware (version up to exclusive milanpi-sp3_1.0.0.4).

How can I fix the vulnerability CVE-2021-26327?

To fix the vulnerability, it is recommended to apply the latest security updates provided by the vendor. Please refer to the vendor's website for specific patch instructions.

Where can I find more information about CVE-2021-26327?

You can find more information about CVE-2021-26327 on the AMD Product Security Bulletin website: [https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021](https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021)

Vulnerability/
CVE-2021-26327

medium

5.5

CWE

668 20

16/11/2021

17/9/2024

CVE-2021-26327: Input Validation

First published: Tue Nov 16 2021(Updated: )

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Credit: psirt@amd.com

Affected Software	Affected Version	How to fix
Amd Epyc 7003 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7003
Amd Epyc 72f3 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 72f3
Amd Epyc 7313 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7313
Amd Epyc 7313p Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7313p
Amd Epyc 7343 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7343
Amd Epyc 73f3 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 73f3
Amd Epyc 7413 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7413
Amd Epyc 7443 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7443
Amd Epyc 7443p Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7443p
Amd Epyc 7453 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7453
Amd Epyc 74f3 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 74f3
Amd Epyc 7513 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7513
Amd Epyc 7543 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7543
Amd Epyc 7543p Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7543p
Amd Epyc 75f3 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 75f3
Amd Epyc 7643 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7643
Amd Epyc 7663 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7663
Amd Epyc 7713 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7713
Amd Epyc 7713p Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7713p
Amd Epyc 7763 Firmware	<milanpi-sp3_1.0.0.4
Amd Epyc 7763

Never miss a vulnerability like this again

Reference Links

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021

Frequently Asked Questions

What is CVE-2021-26327?
CVE-2021-26327 is a vulnerability that involves insufficient validation of guest context in the SNP Firmware, which could potentially lead to a loss of guest confidentiality.
What is the severity of CVE-2021-26327?
The severity of CVE-2021-26327 is medium with a severity value of 5.5.
What software is affected by CVE-2021-26327?
The affected software includes Amd Epyc 7003 Firmware (version up to exclusive milanpi-sp3_1.0.0.4).
How can I fix the vulnerability CVE-2021-26327?
To fix the vulnerability, it is recommended to apply the latest security updates provided by the vendor. Please refer to the vendor's website for specific patch instructions.
Where can I find more information about CVE-2021-26327?
You can find more information about CVE-2021-26327 on the AMD Product Security Bulletin website: [https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021](https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021)