← Back

CVE-2021-26311

nvd nist
Published: May 13, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Affected (65)

Products: Amd: Epyc 7232p, Epyc 7251, Epyc 7252, Epyc 7261, Epyc 7262, Epyc 7272, Epyc 7281, Epyc 7282, Epyc 72f3, Epyc 7301, Epyc 7302, Epyc 7302p, Epyc 7313, Epyc 7313p, Epyc 7343, Epyc 7351, Epyc 7351p, Epyc 7352, Epyc 7371, Epyc 73f3, Epyc 7401, Epyc 7401p, Epyc 7402, Epyc 7402p, Epyc 7413, Epyc 7443, Epyc 7443p, Epyc 7451, Epyc 7452, Epyc 7453, Epyc 74f3, Epyc 7501, Epyc 7502, Epyc 7502p, Epyc 7513, Epyc 7532, Epyc 7542, Epyc 7543, Epyc 7543p, Epyc 7551, Epyc 7551p, Epyc 7552, Epyc 75f3, Epyc 7601, Epyc 7642, Epyc 7643, Epyc 7662, Epyc 7663, Epyc 7702, Epyc 7702p, Epyc 7713, Epyc 7713p, Epyc 7742, Epyc 7763, Epyc 7f32, Epyc 7f52, Epyc 7f72, Epyc 7h12, Epyc Embedded 3101, Epyc Embedded 3151, Epyc Embedded 3201, Epyc Embedded 3251, Epyc Embedded 3255, Epyc Embedded 3351, Epyc Embedded 3451
Amd
65 products
Epyc 7232p
Epyc 7251
Epyc 7252
Epyc 7261
Epyc 7262
Epyc 7272
Epyc 7281
Epyc 7282
Epyc 72f3
Epyc 7301
Epyc 7302
Epyc 7302p
Epyc 7313
Epyc 7313p
Epyc 7343
Epyc 7351
Epyc 7351p
Epyc 7352
Epyc 7371
Epyc 73f3
Epyc 7401
Epyc 7401p
Epyc 7402
Epyc 7402p
Epyc 7413
Epyc 7443
Epyc 7443p
Epyc 7451
Epyc 7452
Epyc 7453
Epyc 74f3
Epyc 7501
Epyc 7502
Epyc 7502p
Epyc 7513
Epyc 7532
Epyc 7542
Epyc 7543
Epyc 7543p
Epyc 7551
Epyc 7551p
Epyc 7552
Epyc 75f3
Epyc 7601
Epyc 7642
Epyc 7643
Epyc 7662
Epyc 7663
Epyc 7702
Epyc 7702p
Epyc 7713
Epyc 7713p
Epyc 7742
Epyc 7763
Epyc 7f32
Epyc 7f52
Epyc 7f72
Epyc 7h12
Epyc Embedded 3101
Epyc Embedded 3151
Epyc Embedded 3201
Epyc Embedded 3251
Epyc Embedded 3255
Epyc Embedded 3351
Epyc Embedded 3451
Configuration A
65 vulnerable
Vulnerable SoftwareAffected Versions
Epyc 7232p
All versions
Epyc 7251
All versions
Epyc 7252
All versions
Epyc 7261
All versions
Epyc 7262
All versions
Epyc 7272
All versions
Epyc 7281
All versions
Epyc 7282
All versions
Epyc 72f3
All versions
Epyc 7301
All versions
Epyc 7302
All versions
Epyc 7302p
All versions
Epyc 7313
All versions
Epyc 7313p
All versions
Epyc 7343
All versions
Epyc 7351
All versions
Epyc 7351p
All versions
Epyc 7352
All versions
Epyc 7371
All versions
Epyc 73f3
All versions
Epyc 7401
All versions
Epyc 7401p
All versions
Epyc 7402
All versions
Epyc 7402p
All versions
Epyc 7413
All versions
Epyc 7443
All versions
Epyc 7443p
All versions
Epyc 7451
All versions
Epyc 7452
All versions
Epyc 7453
All versions
Epyc 74f3
All versions
Epyc 7501
All versions
Epyc 7502
All versions
Epyc 7502p
All versions
Epyc 7513
All versions
Epyc 7532
All versions
Epyc 7542
All versions
Epyc 7543
All versions
Epyc 7543p
All versions
Epyc 7551
All versions
Epyc 7551p
All versions
Epyc 7552
All versions
Epyc 75f3
All versions
Epyc 7601
All versions
Epyc 7642
All versions
Epyc 7643
All versions
Epyc 7662
All versions
Epyc 7663
All versions
Epyc 7702
All versions
Epyc 7702p
All versions
Epyc 7713
All versions
Epyc 7713p
All versions
Epyc 7742
All versions
Epyc 7763
All versions
Epyc 7f32
All versions
Epyc 7f52
All versions
Epyc 7f72
All versions
Epyc 7h12
All versions
Epyc Embedded 3101
All versions
Epyc Embedded 3151
All versions
Epyc Embedded 3201
All versions
Epyc Embedded 3251
All versions
Epyc Embedded 3255
All versions
Epyc Embedded 3351
All versions
Epyc Embedded 3451
All versions

Related CWEs

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (2)

Source: psirt@amd.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.