CVE-2021-26311
High
Description
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
SeverityHigh
CVSS7.2
Exploit probability—
ProductAmd Epyc
PublishedMay 13, 2021
First seenMay 13, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd epyc_7232p | No range specified | — |
| amd epyc_7251 | No range specified | — |
| amd epyc_7252 | No range specified | — |
| amd epyc_7261 | No range specified | — |
| amd epyc_7262 | No range specified | — |
| amd epyc_7272 | No range specified | — |
| amd epyc_7281 | No range specified | — |
| amd epyc_7282 | No range specified | — |
| amd epyc_72f3 | No range specified | — |
| amd epyc_7301 | No range specified | — |
| amd epyc_7302 | No range specified | — |
| amd epyc_7302p | No range specified | — |
| amd epyc_7313 | No range specified | — |
| amd epyc_7313p | No range specified | — |
| amd epyc_7343 | No range specified | — |
| amd epyc_7351 | No range specified | — |
| amd epyc_7351p | No range specified | — |
| amd epyc_7352 | No range specified | — |
| amd epyc_7371 | No range specified | — |
| amd epyc_73f3 | No range specified | — |
| amd epyc_7401 | No range specified | — |
| amd epyc_7401p | No range specified | — |
| amd epyc_7402 | No range specified | — |
| amd epyc_7402p | No range specified | — |
| amd epyc_7413 | No range specified | — |
| amd epyc_7443 | No range specified | — |
| amd epyc_7443p | No range specified | — |
| amd epyc_7451 | No range specified | — |
| amd epyc_7452 | No range specified | — |
| amd epyc_7453 | No range specified | — |
| amd epyc_74f3 | No range specified | — |
| amd epyc_7501 | No range specified | — |
| amd epyc_7502 | No range specified | — |
| amd epyc_7502p | No range specified | — |
| amd epyc_7513 | No range specified | — |
| amd epyc_7532 | No range specified | — |
| amd epyc_7542 | No range specified | — |
| amd epyc_7543 | No range specified | — |
| amd epyc_7543p | No range specified | — |
| amd epyc_7551 | No range specified | — |
| amd epyc_7551p | No range specified | — |
| amd epyc_7552 | No range specified | — |
| amd epyc_75f3 | No range specified | — |
| amd epyc_7601 | No range specified | — |
| amd epyc_7642 | No range specified | — |
| amd epyc_7643 | No range specified | — |
| amd epyc_7662 | No range specified | — |
| amd epyc_7663 | No range specified | — |
| amd epyc_7702 | No range specified | — |
| amd epyc_7702p | No range specified | — |
| amd epyc_7713 | No range specified | — |
| amd epyc_7713p | No range specified | — |
| amd epyc_7742 | No range specified | — |
| amd epyc_7763 | No range specified | — |
| amd epyc_7f32 | No range specified | — |
| amd epyc_7f52 | No range specified | — |
| amd epyc_7f72 | No range specified | — |
| amd epyc_7h12 | No range specified | — |
| amd epyc_embedded_3101 | No range specified | — |
| amd epyc_embedded_3151 | No range specified | — |
| amd epyc_embedded_3201 | No range specified | — |
| amd epyc_embedded_3251 | No range specified | — |
| amd epyc_embedded_3255 | No range specified | — |
| amd epyc_embedded_3351 | No range specified | — |
| amd epyc_embedded_3451 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.