CVE-2021-26396: Medium severity amd epyc 7003 firmware vulnerability
Published Jan 10, 2023
·Updated
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
Affected Software
48 affected components
AMD Epyc 7003 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7003
AMD Epyc 72f3 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 72f3
AMD Epyc 7313 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7313
AMD Epyc 7313p Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7313p
AMD Epyc 7343 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7343
AMD Epyc 7373x Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7373x
AMD Epyc 73f3 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 73f3
AMD Epyc 7413 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7413
AMD Epyc 7443 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7443
AMD Epyc 7443p Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7443p
AMD Epyc 7453 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7453
AMD Epyc 74f3 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 74f3
AMD Epyc 7513 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7513
AMD Epyc 7543 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7543
AMD Epyc 7543p Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7543p
AMD Epyc 7573x Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7573x
AMD Epyc 75f3 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 75f3
AMD Epyc 7643 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7643
AMD Epyc 7663 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7663
AMD Epyc 7713 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7713
AMD Epyc 7713p Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7713p
AMD Epyc 7743 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7743
AMD Epyc 7763 Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7763
AMD Epyc 7773x Firmware<milanpi-sp3_1.0.0.9
AMD Epyc 7773x
Event History
Jan 10, 2023
CVE Published
via MITRE·08:56 PM
Data Sourced
via MITRE·08:56 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-26396.
2
What is the title of the vulnerability?
The title of the vulnerability is "Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest."
3
What is the severity of CVE-2021-26396?
The severity of CVE-2021-26396 is medium with a severity value of 4.4.
4
Which software is affected by CVE-2021-26396?
The affected software is Amd Epyc 7003 Firmware version milanpi-sp3_1.0.0.9.
5
How can I fix CVE-2021-26396?
To fix CVE-2021-26396, it is recommended to update to the latest version of Amd Epyc 7003 Firmware.