CVE-2021-26314

Medium

Description

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.

SeverityMedium
CVSS5.5
Exploit probability—
ProductXen
PublishedJun 9, 2021
First seenJun 9, 2021
Weakness typeCWE-208CWE-208

How to fix

Affected products

ProductAffected versionsFixed in
xen xenNo range specified—
arm cortex-a72No range specified—
broadcom bcm2711No range specified—
intel core_i7-10700kNo range specified—
intel core_i7-7700kNo range specified—
intel core_i9-9900kNo range specified—
intel xeon_silver_4214No range specified—
fedoraproject fedora33, 34—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.