PT-2022-9726 · Amd · 3Rd Gen Amd Epyc™+19

Published 2022-05-10 · Updated 2022-05-16 · CVE-2021-26332

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue is related to the failure to verify that SEV-ES TMR is not in MMIO space, which could result in a potential loss of integrity or availability due to SEV-ES FW.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-26332

Affected Products

3Rd Gen Amd Epyc™

Epyc 72F3 Firmware

Epyc 7313P Firmware

Epyc 7343 Firmware

Epyc 7373X Firmware

Epyc 73F3 Firmware

Epyc 7413 Firmware

Epyc 7443P Firmware

Epyc 7453 Firmware

Epyc 7473X Firmware

Epyc 74F3 Firmware

Epyc 7513 Firmware

Epyc 7543P Firmware

Epyc 7573X Firmware

Epyc 75F3 Firmware

Epyc 7643 Firmware

Epyc 7663 Firmware

Epyc 7713P Firmware

Epyc 7763 Firmware

Epyc 7773X Firmware

References · 3

• https://osv.dev/vulnerability/CVE-2021-26332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26332 · Security Note
• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1021 · Vendor Advisory