Vulnerability Description
Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amd | Epyc 7232P Firmware | romepi_1.0.0.a |
| Amd | Epyc 7232P | - |
| Amd | Epyc 7252 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7252 | - |
| Amd | Epyc 7262 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7262 | - |
| Amd | Epyc 7272 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7272 | - |
| Amd | Epyc 7282 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7282 | - |
| Amd | Epyc 7302 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7302 | - |
| Amd | Epyc 7302P Firmware | romepi_1.0.0.a |
| Amd | Epyc 7302P | - |
| Amd | Epyc 7352 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7352 | - |
| Amd | Epyc 7402 Firmware | romepi_1.0.0.a |
| Amd | Epyc 7402 | - |
| Amd | Epyc 7402P Firmware | romepi_1.0.0.a |
| Amd | Epyc 7402P | - |
References
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3001Vendor Advisory
- https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4001Vendor Advisory
FAQ
What is CVE-2021-26406?
CVE-2021-26406 is a vulnerability with a CVSS score of 7.5 (HIGH). Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially result...
How severe is CVE-2021-26406?
CVE-2021-26406 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-26406?
Check the references section above for vendor advisories and patch information. Affected products include: Amd Epyc 7232P Firmware, Amd Epyc 7232P, Amd Epyc 7252 Firmware, Amd Epyc 7252, Amd Epyc 7262 Firmware.