CVE-2021-26356: High severity amd epyc server firmware vulnerability

Q: What is the severity of CVE-2021-26356?

CVE-2021-26356 is considered a high-severity vulnerability due to its potential impact on data corruption and information disclosure.

Q: How do I fix CVE-2021-26356?

To fix CVE-2021-26356, update the affected AMD EPYC firmware to the latest version provided by AMD.

Q: Which systems are affected by CVE-2021-26356?

CVE-2021-26356 affects various AMD EPYC firmware versions, specifically those prior to naplespi_1.0.0.h and romepi_1.0.0.d.

Q: What are the potential impacts of exploiting CVE-2021-26356?

Exploiting CVE-2021-26356 could allow an attacker to tamper with the SPI ROM and result in S3 data corruption and information disclosure.

Q: Is there a known workaround for CVE-2021-26356?

There are currently no known workarounds for CVE-2021-26356; upgrading the firmware is the recommended action.

Published May 9, 2023

Updated

A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data corruption and information disclosure.

Affected Software

392 affected components

All of the following

AMD Epyc 7001 Firmware<naplespi_1.0.0.h

AMD Epyc 7001

All of the following

AMD Epyc 7251 Firmware<naplespi_1.0.0.h

AMD Epyc 7251

All of the following

AMD Epyc 7261 Firmware<naplespi_1.0.0.h

AMD Epyc 7261

All of the following

AMD Epyc 7281 Firmware<naplespi_1.0.0.h

AMD Epyc 7281

All of the following

AMD Epyc 7301 Firmware<naplespi_1.0.0.h

AMD Epyc 7301

All of the following

AMD Epyc 7351 Firmware<naplespi_1.0.0.h

AMD Epyc 7351

All of the following

AMD Epyc 7351p Firmware<naplespi_1.0.0.h

AMD Epyc 7351p

All of the following

AMD Epyc 7371 Firmware<naplespi_1.0.0.h

AMD Epyc 7371

All of the following

AMD Epyc 7401 Firmware<naplespi_1.0.0.h

AMD Epyc 7401

All of the following

AMD Epyc 7401p Firmware<naplespi_1.0.0.h

AMD Epyc 7401p

All of the following

AMD Epyc 7451 Firmware<naplespi_1.0.0.h

AMD Epyc 7451

All of the following

AMD Epyc 7501 Firmware<naplespi_1.0.0.h

AMD Epyc 7501

All of the following

AMD Epyc 7551 Firmware<naplespi_1.0.0.h

AMD Epyc 7551

All of the following

AMD Epyc 7551p Firmware<naplespi_1.0.0.h

AMD Epyc 7551p

All of the following

AMD Epyc 7601 Firmware<naplespi_1.0.0.h

AMD Epyc 7601

All of the following

AMD Epyc 7002 Firmware<romepi_1.0.0.d

AMD Epyc 7002

All of the following

AMD Epyc 7232p Firmware<romepi_1.0.0.d

AMD Epyc 7232p

All of the following

AMD Epyc 7252 Firmware<romepi_1.0.0.d

AMD Epyc 7252

All of the following

AMD Epyc 7262 Firmware<romepi_1.0.0.d

AMD Epyc 7262

All of the following

AMD Epyc 7272 Firmware<romepi_1.0.0.d

AMD Epyc 7272

All of the following

AMD Epyc 7282 Firmware<romepi_1.0.0.d

AMD Epyc 7282

All of the following

AMD Epyc 7302 Firmware<romepi_1.0.0.d

AMD Epyc 7302

All of the following

AMD Epyc 7302p Firmware<romepi_1.0.0.d

AMD Epyc 7302p

All of the following

AMD Epyc 7352 Firmware<romepi_1.0.0.d

AMD Epyc 7352

All of the following

AMD Epyc 7402 Firmware<romepi_1.0.0.d

AMD Epyc 7402

All of the following

AMD Epyc 7402p Firmware<romepi_1.0.0.d

AMD Epyc 7402p

All of the following

AMD Epyc 7452 Firmware<romepi_1.0.0.d

AMD Epyc 7452

All of the following

AMD Epyc 7502 Firmware<romepi_1.0.0.d

AMD Epyc 7502

All of the following

AMD Epyc 7532 Firmware<romepi_1.0.0.d

AMD Epyc 7532

All of the following

AMD Epyc 7542 Firmware<romepi_1.0.0.d

AMD Epyc 7542

All of the following

AMD Epyc 7552 Firmware<romepi_1.0.0.d

AMD Epyc 7552

All of the following

AMD Epyc 7642 Firmware<romepi_1.0.0.d

AMD Epyc 7642

All of the following

AMD Epyc 7662 Firmware<romepi_1.0.0.d

AMD Epyc 7662

All of the following

AMD Epyc 7702 Firmware<romepi_1.0.0.d

AMD Epyc 7702

All of the following

AMD Epyc 7702p Firmware<romepi_1.0.0.d

AMD Epyc 7702p

All of the following

AMD Epyc 7f32 Firmware<romepi_1.0.0.d

AMD Epyc 7f32

All of the following

AMD Epyc 7f52 Firmware<romepi_1.0.0.d

AMD Epyc 7f52

All of the following

AMD Epyc 7f72 Firmware<romepi_1.0.0.d

AMD Epyc 7f72

All of the following

AMD Epyc 7h12 Firmware<romepi_1.0.0.d

AMD Epyc 7h12

All of the following

AMD Epyc 7742 Firmware<romepi_1.0.0.d

AMD Epyc 7742

All of the following

AMD Epyc 7773x Firmware<milanpi_1.0.0.6

AMD Epyc 7773x

All of the following

AMD Epyc 7763 Firmware<milanpi_1.0.0.6

AMD Epyc 7763

All of the following

AMD Epyc 7713p Firmware<milanpi_1.0.0.6

AMD Epyc 7713p

All of the following

AMD Epyc 7713 Firmware<milanpi_1.0.0.6

AMD Epyc 7713

All of the following

AMD Epyc 7663 Firmware<milanpi_1.0.0.6

AMD Epyc 7663

All of the following

AMD Epyc 7643 Firmware<milanpi_1.0.0.6

AMD Epyc 7643

All of the following

AMD Epyc 75f3 Firmware<milanpi_1.0.0.6

AMD Epyc 75f3

All of the following

AMD Epyc 7573x Firmware<milanpi_1.0.0.6

AMD Epyc 7573x

All of the following

AMD Epyc 7543p Firmware<milanpi_1.0.0.6

AMD Epyc 7543p

All of the following

AMD Epyc 7543 Firmware<milanpi_1.0.0.6

AMD Epyc 7543

All of the following

AMD Epyc 7513 Firmware<milanpi_1.0.0.6

AMD Epyc 7513

All of the following

AMD Epyc 74f3 Firmware<milanpi_1.0.0.6

AMD Epyc 74f3

All of the following

AMD Epyc 7473x Firmware<milanpi_1.0.0.6

AMD Epyc 7473x

All of the following

AMD Epyc 7443p Firmware<milanpi_1.0.0.6

AMD Epyc 7443p

All of the following

AMD Epyc 7443 Firmware<milanpi_1.0.0.6

AMD Epyc 7443

All of the following

AMD Epyc 7453 Firmware<milanpi_1.0.0.6

AMD Epyc 7453

All of the following

AMD Epyc 7413 Firmware<milanpi_1.0.0.6

AMD Epyc 7413

All of the following

AMD Epyc 7373x Firmware<milanpi_1.0.0.6

AMD Epyc 7373x

All of the following

AMD Epyc 7313 Firmware<milanpi_1.0.0.6

AMD Epyc 7313

All of the following

AMD Epyc 7313p Firmware<milanpi_1.0.0.6

AMD Epyc 7313p

All of the following

AMD Epyc 7343 Firmware<milanpi_1.0.0.6

AMD Epyc 7343

All of the following

AMD Epyc 72f3 Firmware<milanpi_1.0.0.6

AMD Epyc 72f3

All of the following

AMD Ryzen 9 3950x Firmware

AMD Ryzen 9 3950x

All of the following

AMD Ryzen 9 3950xt Firmware

AMD Ryzen 9 3950xt

All of the following

AMD Ryzen 9 3900 Firmware

AMD Ryzen 9 3900

All of the following

AMD Ryzen 9 3900x Firmware

AMD Ryzen 9 3900x

All of the following

AMD Ryzen 7 3800x Firmware

AMD Ryzen 7 3800x

All of the following

AMD Ryzen 7 3800xt Firmware

AMD Ryzen 7 3800xt

All of the following

AMD Ryzen 7 3700xt Firmware

AMD Ryzen 7 3700xt

All of the following

AMD Ryzen 5 3600x Firmware

AMD Ryzen 5 3600x

All of the following

AMD Ryzen 5 3600xt Firmware

AMD Ryzen 5 3600xt

All of the following

AMD Ryzen 5 3600 Firmware

AMD Ryzen 5 3600

All of the following

AMD Ryzen 5 3500x Firmware

AMD Ryzen 5 3500x

All of the following

AMD Ryzen 5 3500 Firmware

AMD Ryzen 5 3500

All of the following

AMD Ryzen 3 3300x Firmware

AMD Ryzen 3 3300x

All of the following

AMD Ryzen 3 3100 Firmware

AMD Ryzen 3 3100

All of the following

AMD Ryzen 9 5950x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5950x

All of the following

AMD Ryzen 9 5900x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5900x

All of the following

AMD Ryzen 9 5900 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5900

All of the following

AMD Ryzen 7 5800x3d Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800x3d

All of the following

AMD Ryzen 7 5800x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800x

All of the following

AMD Ryzen 7 5800 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800

All of the following

AMD Ryzen 7 5700x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5700x

All of the following

AMD Ryzen 5 5600 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5600

All of the following

AMD Ryzen 5 5600x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5600x

All of the following

AMD Ryzen 5 5500 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5500

All of the following

AMD Ryzen Threadripper 3990x Firmware

AMD Ryzen Threadripper 3990x

All of the following

AMD Ryzen Threadripper 3970x Firmware

AMD Ryzen Threadripper 3970x

All of the following

AMD Ryzen Threadripper 3960x Firmware

AMD Ryzen Threadripper 3960x

All of the following

AMD Ryzen Threadripper Pro 3995wx Firmware

AMD Ryzen Threadripper Pro 3995wx

All of the following

AMD Ryzen Threadripper Pro 3975wx Firmware

AMD Ryzen Threadripper Pro 3975wx

All of the following

AMD Ryzen Threadripper Pro 3955wx Firmware

AMD Ryzen Threadripper Pro 3955wx

All of the following

AMD Ryzen Threadripper Pro 3945wx Firmware

AMD Ryzen Threadripper Pro 3945wx

All of the following

AMD Ryzen Threadripper Pro 5955wx Firmware

AMD Ryzen Threadripper Pro 5955wx

All of the following

AMD Ryzen Threadripper Pro 5965wx Firmware

AMD Ryzen Threadripper Pro 5965wx

All of the following

AMD Ryzen Threadripper Pro 5945wx Firmware

AMD Ryzen Threadripper Pro 5945wx

All of the following

AMD Ryzen Threadripper Pro 5975wx Firmware

AMD Ryzen Threadripper Pro 5975wx

All of the following

AMD Ryzen Threadripper Pro 5995wx Firmware

AMD Ryzen Threadripper Pro 5995wx

AMD Epyc 7001 Firmware<naplespi_1.0.0.h

AMD Epyc 7001

AMD Epyc 7251 Firmware<naplespi_1.0.0.h

AMD Epyc 7251

AMD Epyc 7261 Firmware<naplespi_1.0.0.h

AMD Epyc 7261

AMD Epyc 7281 Firmware<naplespi_1.0.0.h

AMD Epyc 7281

AMD Epyc 7301 Firmware<naplespi_1.0.0.h

AMD Epyc 7301

AMD Epyc 7351 Firmware<naplespi_1.0.0.h

AMD Epyc 7351

AMD Epyc 7351p Firmware<naplespi_1.0.0.h

AMD Epyc 7351p

AMD Epyc 7371 Firmware<naplespi_1.0.0.h

AMD Epyc 7371

AMD Epyc 7401 Firmware<naplespi_1.0.0.h

AMD Epyc 7401

AMD Epyc 7401p Firmware<naplespi_1.0.0.h

AMD Epyc 7401p

AMD Epyc 7451 Firmware<naplespi_1.0.0.h

AMD Epyc 7451

AMD Epyc 7501 Firmware<naplespi_1.0.0.h

AMD Epyc 7501

AMD Epyc 7551 Firmware<naplespi_1.0.0.h

AMD Epyc 7551

AMD Epyc 7551p Firmware<naplespi_1.0.0.h

AMD Epyc 7551p

AMD Epyc 7601 Firmware<naplespi_1.0.0.h

AMD Epyc 7601

AMD Epyc 7002 Firmware<romepi_1.0.0.d

AMD Epyc 7002

AMD Epyc 7232p Firmware<romepi_1.0.0.d

AMD Epyc 7232p

AMD Epyc 7252 Firmware<romepi_1.0.0.d

AMD Epyc 7252

AMD Epyc 7262 Firmware<romepi_1.0.0.d

AMD Epyc 7262

AMD Epyc 7272 Firmware<romepi_1.0.0.d

AMD Epyc 7272

AMD Epyc 7282 Firmware<romepi_1.0.0.d

AMD Epyc 7282

AMD Epyc 7302 Firmware<romepi_1.0.0.d

AMD Epyc 7302

AMD Epyc 7302p Firmware<romepi_1.0.0.d

AMD Epyc 7302p

AMD Epyc 7352 Firmware<romepi_1.0.0.d

AMD Epyc 7352

AMD Epyc 7402 Firmware<romepi_1.0.0.d

AMD Epyc 7402

AMD Epyc 7402p Firmware<romepi_1.0.0.d

AMD Epyc 7402p

AMD Epyc 7452 Firmware<romepi_1.0.0.d

AMD Epyc 7452

AMD Epyc 7502 Firmware<romepi_1.0.0.d

AMD Epyc 7502

AMD Epyc 7532 Firmware<romepi_1.0.0.d

AMD Epyc 7532

AMD Epyc 7542 Firmware<romepi_1.0.0.d

AMD Epyc 7542

AMD Epyc 7552 Firmware<romepi_1.0.0.d

AMD Epyc 7552

AMD Epyc 7642 Firmware<romepi_1.0.0.d

AMD Epyc 7642

AMD Epyc 7662 Firmware<romepi_1.0.0.d

AMD Epyc 7662

AMD Epyc 7702 Firmware<romepi_1.0.0.d

AMD Epyc 7702

AMD Epyc 7702p Firmware<romepi_1.0.0.d

AMD Epyc 7702p

AMD Epyc 7f32 Firmware<romepi_1.0.0.d

AMD Epyc 7f32

AMD Epyc 7f52 Firmware<romepi_1.0.0.d

AMD Epyc 7f52

AMD Epyc 7f72 Firmware<romepi_1.0.0.d

AMD Epyc 7f72

AMD Epyc 7h12 Firmware<romepi_1.0.0.d

AMD Epyc 7h12

AMD Epyc 7742 Firmware<romepi_1.0.0.d

AMD Epyc 7742

AMD Epyc 7773x Firmware<milanpi_1.0.0.6

AMD Epyc 7773x

AMD Epyc 7763 Firmware<milanpi_1.0.0.6

AMD Epyc 7763

AMD Epyc 7713p Firmware<milanpi_1.0.0.6

AMD Epyc 7713p

AMD Epyc 7713 Firmware<milanpi_1.0.0.6

AMD Epyc 7713

AMD Epyc 7663 Firmware<milanpi_1.0.0.6

AMD Epyc 7663

AMD Epyc 7643 Firmware<milanpi_1.0.0.6

AMD Epyc 7643

AMD Epyc 75f3 Firmware<milanpi_1.0.0.6

AMD Epyc 75f3

AMD Epyc 7573x Firmware<milanpi_1.0.0.6

AMD Epyc 7573x

AMD Epyc 7543p Firmware<milanpi_1.0.0.6

AMD Epyc 7543p

AMD Epyc 7543 Firmware<milanpi_1.0.0.6

AMD Epyc 7543

AMD Epyc 7513 Firmware<milanpi_1.0.0.6

AMD Epyc 7513

AMD Epyc 74f3 Firmware<milanpi_1.0.0.6

AMD Epyc 74f3

AMD Epyc 7473x Firmware<milanpi_1.0.0.6

AMD Epyc 7473x

AMD Epyc 7443p Firmware<milanpi_1.0.0.6

AMD Epyc 7443p

AMD Epyc 7443 Firmware<milanpi_1.0.0.6

AMD Epyc 7443

AMD Epyc 7453 Firmware<milanpi_1.0.0.6

AMD Epyc 7453

AMD Epyc 7413 Firmware<milanpi_1.0.0.6

AMD Epyc 7413

AMD Epyc 7373x Firmware<milanpi_1.0.0.6

AMD Epyc 7373x

AMD Epyc 7313 Firmware<milanpi_1.0.0.6

AMD Epyc 7313

AMD Epyc 7313p Firmware<milanpi_1.0.0.6

AMD Epyc 7313p

AMD Epyc 7343 Firmware<milanpi_1.0.0.6

AMD Epyc 7343

AMD Epyc 72f3 Firmware<milanpi_1.0.0.6

AMD Epyc 72f3

AMD Ryzen 9 3950x Firmware

AMD Ryzen 9 3950x

AMD Ryzen 9 3950xt Firmware

AMD Ryzen 9 3950xt

AMD Ryzen 9 3900 Firmware

AMD Ryzen 9 3900

AMD Ryzen 9 3900x Firmware

AMD Ryzen 9 3900x

AMD Ryzen 7 3800x Firmware

AMD Ryzen 7 3800x

AMD Ryzen 7 3800xt Firmware

AMD Ryzen 7 3800xt

AMD Ryzen 7 3700xt Firmware

AMD Ryzen 7 3700xt

AMD Ryzen 5 3600x Firmware

AMD Ryzen 5 3600x

AMD Ryzen 5 3600xt Firmware

AMD Ryzen 5 3600xt

AMD Ryzen 5 3600 Firmware

AMD Ryzen 5 3600

AMD Ryzen 5 3500x Firmware

AMD Ryzen 5 3500x

AMD Ryzen 5 3500 Firmware

AMD Ryzen 5 3500

AMD Ryzen 3 3300x Firmware

AMD Ryzen 3 3300x

AMD Ryzen 3 3100 Firmware

AMD Ryzen 3 3100

AMD Ryzen 9 5950x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5950x

AMD Ryzen 9 5900x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5900x

AMD Ryzen 9 5900 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 9 5900

AMD Ryzen 7 5800x3d Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800x3d

AMD Ryzen 7 5800x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800x

AMD Ryzen 7 5800 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5800

AMD Ryzen 7 5700x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 7 5700x

AMD Ryzen 5 5600 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5600

AMD Ryzen 5 5600x Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5600x

AMD Ryzen 5 5500 Firmware<comboam4_v2_pi_1.2.0.6

AMD Ryzen 5 5500

AMD Ryzen Threadripper 3990x Firmware

AMD Ryzen Threadripper 3990x

AMD Ryzen Threadripper 3970x Firmware

AMD Ryzen Threadripper 3970x

AMD Ryzen Threadripper 3960x Firmware

AMD Ryzen Threadripper 3960x

AMD Ryzen Threadripper Pro 3995wx Firmware

AMD Ryzen Threadripper Pro 3995wx

AMD Ryzen Threadripper Pro 3975wx Firmware

AMD Ryzen Threadripper Pro 3975wx

AMD Ryzen Threadripper Pro 3955wx Firmware

AMD Ryzen Threadripper Pro 3955wx

AMD Ryzen Threadripper Pro 3945wx Firmware

AMD Ryzen Threadripper Pro 3945wx

AMD Ryzen Threadripper Pro 5955wx Firmware

AMD Ryzen Threadripper Pro 5955wx

AMD Ryzen Threadripper Pro 5965wx Firmware

AMD Ryzen Threadripper Pro 5965wx

AMD Ryzen Threadripper Pro 5945wx Firmware

AMD Ryzen Threadripper Pro 5945wx

AMD Ryzen Threadripper Pro 5975wx Firmware

AMD Ryzen Threadripper Pro 5975wx

AMD Ryzen Threadripper Pro 5995wx Firmware

AMD Ryzen Threadripper Pro 5995wx

Event History

May 9, 2023

CVE Published

via MITRE·06:58 PM

Data Sourced

via MITRE·06:58 PM

Description

Frequently Asked Questions

What is the severity of CVE-2021-26356?

CVE-2021-26356 is considered a high-severity vulnerability due to its potential impact on data corruption and information disclosure.

How do I fix CVE-2021-26356?

To fix CVE-2021-26356, update the affected AMD EPYC firmware to the latest version provided by AMD.

Which systems are affected by CVE-2021-26356?

CVE-2021-26356 affects various AMD EPYC firmware versions, specifically those prior to naplespi_1.0.0.h and romepi_1.0.0.d.

What are the potential impacts of exploiting CVE-2021-26356?

Exploiting CVE-2021-26356 could allow an attacker to tamper with the SPI ROM and result in S3 data corruption and information disclosure.

Is there a known workaround for CVE-2021-26356?

There are currently no known workarounds for CVE-2021-26356; upgrading the firmware is the recommended action.

CVE-2021-26356: High severity amd epyc server firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2021-26356?

How do I fix CVE-2021-26356?

Which systems are affected by CVE-2021-26356?

What are the potential impacts of exploiting CVE-2021-26356?

Is there a known workaround for CVE-2021-26356?

Company

Resources

Contact