Medium · 4.4 CVE-2021-26396 EUVD-2021-13202GHSA-82wg-vgc4-3633

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.

Published Jan 10, 2023 · Updated Apr 9, 2025 · Assigned by AMD

Vendor: AMD Product: 3rd Gen EPYC

Description

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.

Affected products

Vendor	Product	Affected	Fixed
AMD	3rd Gen EPYC	various	—

Advisories 1

WID-SEC-2023-0061 AMD Prozessoren: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 10, 2023

References

https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032 vendor-advisory