CVE-2021-26398
published 2023-01-11CVE-2021-26398: Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure…
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.
Affected
67 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | 1st_gen_epyc | — | — |
| amd | 2nd_gen_epyc | — | — |
| amd | 3rd_gen_epyc | — | — |
| amd | epyc_7001_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7002_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7003_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |
| amd | epyc_7232p_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7251_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7252_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7261_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7262_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7272_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7281_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7282_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_72f3_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |
| amd | epyc_7301_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7302_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7302p_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7313_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |
| amd | epyc_7313p_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |
| amd | epyc_7343_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |
| amd | epyc_7351_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7352_firmware | < romepi_1.0.0.c | romepi_1.0.0.c |
| amd | epyc_7371_firmware | < naplespi_1.0.0.h | naplespi_1.0.0.h |
| amd | epyc_7373x_firmware | < milanpi_1.0.0.4 | milanpi_1.0.0.4 |