CVE-2021-26332: High severity amd epyc 7763 firmware vulnerability
Published May 10, 2022
·Updated
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
Affected Software
46 affected components
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7763
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713p
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7713
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7663
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7643
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 75f3
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543p
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7543
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7513
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 74f3
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443p
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7443
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7413
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 73f3
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7343
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313p
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7313
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 72f3
AMD Epyc 7773x Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7773x
AMD Epyc 7473x Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7473x
AMD Epyc 7573x Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7573x
AMD Epyc 7373x Firmware<milanpi-sp3_1.0.0.4
AMD Epyc 7373x
Event History
May 10, 2022
CVE Published
via MITRE·06:26 PM
Data Sourced
via MITRE·06:26 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-26332.
2
What is the severity of CVE-2021-26332?
The severity of CVE-2021-26332 is high with a severity value of 7.1.
3
What is the affected software for CVE-2021-26332?
The affected software for CVE-2021-26332 includes Amd Epyc 7763 Firmware (up to exclusive version milanpi-sp3_1.0.0.4), Amd Epyc 7713p Firmware (up to exclusive version milanpi-sp3_1.0.0.4), and other related versions.
4
What is the potential impact of CVE-2021-26332?
The potential impact of CVE-2021-26332 is a potential loss of integrity or availability.
5
Where can I find more information about CVE-2021-26332?
You can find more information about CVE-2021-26332 on the AMD product security website.