CVE-2021-26342

published 2022-05-11

CVE-2021-26342: In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a…

Priority P4 11 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

Affected

39 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	epyc_7001_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7251_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7261_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7281_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_72f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7301_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7313_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7313p_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7343_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7351_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7351p_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7371_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7373x_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_73f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7401_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7401p_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7413_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7443_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7443p_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7451_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7453_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7473x_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_74f3_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7
amd	epyc_7501_firmware	< naplespi-sp3_1.0.0.h	naplespi-sp3_1.0.0.h
amd	epyc_7513_firmware	< milanpi-sp3_1.0.0.7	milanpi-sp3_1.0.0.7

CVSS provenance

nvd v3.1 3.3 LOW CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.