Skip to content
OpenAdvisories
Unscored CVE-2021-26321 EUVD-2021-13127GHSA-f2xj-57vr-m78h

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

Published Nov 16, 2021 · Updated Sep 16, 2024 · Assigned by AMD

Vendor: AMD Product: 1st Gen AMD EPYC™ Product: 2nd Gen AMD EPYC™ Product: 3rd Gen AMD EPYC™

Description

Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.

Affected products

VendorProductAffectedFixed
AMD 1st Gen AMD EPYC™ unspecified – < NaplesPI-SP3_1.0.0.G NaplesPI-SP3_1.0.0.G
AMD 2nd Gen AMD EPYC™ unspecified – < RomePI-SP3_1.0.0.C RomePI-SP3_1.0.0.C
AMD 3rd Gen AMD EPYC™ unspecified – < MilanPI-SP3_1.0.0.4 MilanPI-SP3_1.0.0.4

References