cbcvebase.
CVE-2021-26406
published 2023-05-09

CVE-2021-26406: Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.

Affected

52 ranges· showing 25
VendorProductVersion rangeFixed in
amd1st_gen_amd_epyc_processors
amd2nd_gen_amd_epyc_processors
amd2nd_gen_amd_ryzen_threadripper_processors_colfax
amd3rd_gen_amd_ryzen_threadripper_processors_castle_peak_hedt
amdamd_ryzen_5000_series_desktop_processors_vermeer_am4
amdathlon_3000_series_mobile_processors_with_radeon_graphics_dali_dali_ulp
amdathlon_3000_series_mobile_processors_with_radeon_graphics_pollock
amdepyc_7232p_firmware
amdepyc_7251_firmware
amdepyc_7252_firmware
amdepyc_7261_firmware
amdepyc_7262_firmware
amdepyc_7272_firmware
amdepyc_7281_firmware
amdepyc_7282_firmware
amdepyc_7301_firmware
amdepyc_7302_firmware
amdepyc_7302p_firmware
amdepyc_7351_firmware
amdepyc_7351p_firmware
amdepyc_7352_firmware
amdepyc_7371_firmware
amdepyc_7401_firmware
amdepyc_7401p_firmware
amdepyc_7402_firmware