CVE-2021-26353: High severity AMD Epyc 7763 Firmware vulnerability
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26353?
CVE-2021-26353 is a vulnerability that allows an attacker to create a mishandled error, leaving the DRTM UApp in a partially initialized state, potentially resulting in loss of memory integrity.
How severe is CVE-2021-26353?
CVE-2021-26353 has a severity score of 7.8 out of 10, which is considered high.
What software is affected by CVE-2021-26353?
The affected software includes Amd Epyc 7763 Firmware, Amd Epyc 7713p Firmware, Amd Epyc 7713 Firmware, Amd Epyc 7663 Firmware, Amd Epyc 7643 Firmware, Amd Epyc 75f3 Firmware, Amd Epyc 7543p Firmware, Amd Epyc 7543 Firmware, Amd Epyc 7513 Firmware, Amd Epyc 7453 Firmware, Amd Epyc 74f3 Firmware, Amd Epyc 7443p Firmware, Amd Epyc 7443 Firmware, Amd Epyc 7413 Firmware, Amd Epyc 73f3 Firmware, Amd Epyc 7343 Firmware, Amd Epyc 7313p Firmware, Amd Epyc 7313 Firmware, Amd Epyc 72f3 Firmware, Amd Epyc 7773x Firmware, Amd Epyc 7473x Firmware, Amd Epyc 7573x Firmware, and Amd Epyc 7373x Firmware.
How can I fix CVE-2021-26353?
To fix CVE-2021-26353, it is recommended to apply the necessary security patches provided by AMD.
Where can I find more information about CVE-2021-26353?
More information about CVE-2021-26353 can be found on the AMD Product Security Bulletin: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032