PT-2021-17000 · Amd+11 · All Supported Processors+8

Cristiano Giuffrida + 3 · Published 2021-06-09 · Updated 2023-06-30 · CVE-2021-26314

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions All supported CPU products (affected versions not specified)

Description The issue concerns potential floating point value injection in CPU products, which, when combined with software vulnerabilities related to speculative execution, can lead to the use of incorrect floating point results. This may cause data leakage due to the incorrect use of data from FPVI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Side Channel Attack

Weakness Enumeration

CWE-208

CWE-203

Related Identifiers

CVE-2021-26314

Affected Products

All Supported Processors

Bcm2711

Core I7-10700K

Core I7-7700K

Core I9-9900K

Cortex-A72

Fedora

Xen

Xeon Silver 4214

References · 13

• 🔥 http://openwall.com/lists/oss-security/2021/06/10/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-26314 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1003 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-26314 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-26314 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-26314 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26314 · Vendor Advisory
• https://t.me/cvenotify/16496 · Telegram Post
• http://openwall.com/lists/oss-security/2021/06/09/2 · Note
• https://t.me/cvenotify/16502 · Telegram Post
• https://t.me/cvenotify/53417 · Telegram Post