CVE-2021-26340: High severity amd epyc server firmware vulnerability
Published Dec 10, 2021
·Updated
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).
Affected Software
210 affected components
AMD Epyc 7001 Firmware
AMD Epyc 7001
AMD Epyc 7232p Firmware
AMD Epyc 7232p
AMD Epyc 7251 Firmware
AMD Epyc 7251
AMD Epyc 7261 Firmware
AMD Epyc 7261
AMD Epyc 7252 Firmware
AMD Epyc 7252
AMD Epyc 74f3 Firmware
AMD Epyc 74f3
AMD Epyc 7501 Firmware
AMD Epyc 7501
AMD Epyc 7502 Firmware
AMD Epyc 7502
AMD Epyc 7502p Firmware
AMD Epyc 7502p
AMD Epyc 7513 Firmware
AMD Epyc 7513
AMD Epyc 7532 Firmware
AMD Epyc 7532
AMD Epyc 7542 Firmware
AMD Epyc 7542
AMD Epyc 7543 Firmware
AMD Epyc 7543
AMD Epyc 7543p Firmware
AMD Epyc 7543p
AMD Epyc 7551 Firmware
AMD Epyc 7551
AMD Epyc 7551p Firmware
AMD Epyc 7551p
AMD Epyc 7552 Firmware
AMD Epyc 7552
AMD Epyc 75f3 Firmware
AMD Epyc 75f3
AMD Epyc 7601 Firmware
AMD Epyc 7601
AMD Epyc 7642 Firmware
AMD Epyc 7642
AMD Epyc 7643 Firmware
AMD Epyc 7643
AMD Epyc 7662 Firmware
AMD Epyc 7662
AMD Epyc 7663 Firmware
AMD Epyc 7663
AMD Epyc 7702p Firmware
AMD Epyc 7702p
AMD Epyc 7702 Firmware
AMD Epyc 7702
AMD Epyc 7713 Firmware
AMD Epyc 7713
AMD Epyc 7713p Firmware
AMD Epyc 7713p
AMD Epyc 7742 Firmware
AMD Epyc 7742
AMD Epyc 7763 Firmware
AMD Epyc 7763
AMD Epyc 7f32 Firmware
AMD Epyc 7f32
AMD Epyc 7f52 Firmware
AMD Epyc 7f52
AMD Epyc 7262 Firmware
AMD Epyc 7262
AMD Epyc 7272 Firmware
AMD Epyc 7272
AMD Epyc 7281 Firmware
AMD Epyc 7281
AMD Epyc 7282 Firmware
AMD Epyc 7282
AMD Epyc 72f3 Firmware
AMD Epyc 72f3
AMD Epyc 7302 Firmware
AMD Epyc 7302
AMD Epyc 7301 Firmware
AMD Epyc 7301
AMD Epyc 7302p Firmware
AMD Epyc 7302p
AMD Epyc 7313 Firmware
AMD Epyc 7313
AMD Epyc 7313p Firmware
AMD Epyc 7313p
AMD Epyc 7343 Firmware
AMD Epyc 7343
AMD Epyc 7351 Firmware
AMD Epyc 7351
AMD Epyc 7351p Firmware
AMD Epyc 7351p
AMD Epyc 7352 Firmware
AMD Epyc 7352
AMD Epyc 7371 Firmware
AMD Epyc 7371
AMD Epyc 73f3 Firmware
AMD Epyc 73f3
AMD Epyc 7401 Firmware
AMD Epyc 7401
AMD Epyc 7401p Firmware
AMD Epyc 7401p
AMD Epyc 7402 Firmware
AMD Epyc 7402
AMD Epyc 7402p Firmware
AMD Epyc 7402p
AMD Epyc 7413 Firmware
AMD Epyc 7413
AMD Epyc 7443p Firmware
AMD Epyc 7443p
AMD Epyc 7443 Firmware
AMD Epyc 7443
AMD Epyc 7451 Firmware
AMD Epyc 7451
AMD Epyc 7452 Firmware
AMD Epyc 7452
AMD Epyc 7453 Firmware
AMD Epyc 7453
AMD Epyc 7f72 Firmware
AMD Epyc 7f72
AMD Epyc 7h12 Firmware
AMD Epyc 7h12
AMD Epyc Embedded 3101 Firmware
AMD Epyc Embedded 3101
AMD Epyc Embedded 3151 Firmware
AMD Epyc Embedded 3151
AMD Epyc Embedded 3201 Firmware
AMD Epyc Embedded 3201
AMD Epyc Embedded 3251 Firmware
AMD Epyc Embedded 3251
AMD Epyc Embedded 3255 Firmware
AMD Epyc Embedded 3255
AMD Epyc Embedded 3351 Firmware
AMD Epyc Embedded 3351
AMD Epyc Embedded 3451 Firmware
AMD Epyc Embedded 3451
AMD Epyc Embedded 7601 Firmware
AMD Epyc Embedded 7601
AMD Epyc Embedded 7551 Firmware
AMD Epyc Embedded 7551
AMD Epyc Embedded 7501 Firmware
AMD Epyc Embedded 7501
AMD Epyc Embedded 7451 Firmware
AMD Epyc Embedded 7451
AMD Epyc Embedded 7401 Firmware
AMD Epyc Embedded 7401
AMD Epyc Embedded 7371 Firmware
AMD Epyc Embedded 7371
AMD Epyc Embedded 7351 Firmware
AMD Epyc Embedded 7351
AMD Epyc Embedded 7301 Firmware
AMD Epyc Embedded 7301
AMD Epyc Embedded 7281 Firmware
AMD Epyc Embedded 7281
AMD Epyc Embedded 7261 Firmware
AMD Epyc Embedded 7261
AMD Epyc Embedded 7251 Firmware
AMD Epyc Embedded 7251
AMD Epyc Embedded 755p Firmware
AMD Epyc Embedded 755p
AMD Epyc Embedded 740p Firmware
AMD Epyc Embedded 740p
AMD Epyc Embedded 735p Firmware
AMD Epyc Embedded 735p
AMD Epyc Embedded 7h12 Firmware
AMD Epyc Embedded 7h12
AMD Epyc Embedded 7742 Firmware
AMD Epyc Embedded 7742
AMD Epyc Embedded 7702 Firmware
AMD Epyc Embedded 7702
AMD Epyc Embedded 7662 Firmware
AMD Epyc Embedded 7662
AMD Epyc Embedded 7642 Firmware
AMD Epyc Embedded 7642
AMD Epyc Embedded 7552 Firmware
AMD Epyc Embedded 7552
AMD Epyc Embedded 7542 Firmware
AMD Epyc Embedded 7542
AMD Epyc Embedded 7532 Firmware
AMD Epyc Embedded 7532
AMD Epyc Embedded 7502 Firmware
AMD Epyc Embedded 7502
AMD Epyc Embedded 7452 Firmware
AMD Epyc Embedded 7452
AMD Epyc Embedded 7f72 Firmware
AMD Epyc Embedded 7f72
AMD Epyc Embedded 7402 Firmware
AMD Epyc Embedded 7402
AMD Epyc Embedded 7352 Firmware
AMD Epyc Embedded 7352
AMD Epyc Embedded 7f52 Firmware
AMD Epyc Embedded 7f52
AMD Epyc Embedded 7302 Firmware
AMD Epyc Embedded 7302
AMD Epyc Embedded 7282 Firmware
AMD Epyc Embedded 7282
AMD Epyc Embedded 7272 Firmware
AMD Epyc Embedded 7272
AMD Epyc Embedded 7f32 Firmware
AMD Epyc Embedded 7f32
AMD Epyc Embedded 7262 Firmware
AMD Epyc Embedded 7262
AMD Epyc Embedded 7252 Firmware
AMD Epyc Embedded 7252
AMD Epyc Embedded 7702p Firmware
AMD Epyc Embedded 7702p
AMD Epyc Embedded 7502p Firmware
AMD Epyc Embedded 7502p
AMD Epyc Embedded 7402p Firmware
AMD Epyc Embedded 7402p
AMD Epyc Embedded 7302p Firmware
AMD Epyc Embedded 7302p
AMD Epyc Embedded 7232p Firmware
AMD Epyc Embedded 7232p
Event History
Dec 10, 2021
CVE Published
via MITRE·09:55 PM
Data Sourced
via MITRE·09:55 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-26340?
CVE-2021-26340 has a CVSS score that indicates a high severity due to the potential for privilege escalation and unexpected behavior in vulnerable AMD EPYC firmware.
2
How do I fix CVE-2021-26340?
To remediate CVE-2021-26340, users should update their AMD EPYC firmware to the latest version provided by the manufacturer.
3
Which systems are affected by CVE-2021-26340?
CVE-2021-26340 affects various AMD EPYC series firmware versions including 7001, 7232p, 7251, and others listed in the vulnerability documentation.
4
What types of attacks can exploit CVE-2021-26340?
CVE-2021-26340 can be exploited by an unprivileged attacker process within an SEV/SEV-ES guest VM, potentially allowing for privilege escalation.
5
Is my AMD EPYC system vulnerable to CVE-2021-26340?
To determine vulnerability to CVE-2021-26340, check your firmware version against the list of affected versions in the advisory from AMD.