Unscored CVE-2021-26408 EUVD-2021-13214GHSA-q49c-2cmm-mw74

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in …

Published May 10, 2022 · Updated Sep 16, 2024 · Assigned by AMD

Vendor: AMD Product: 1st Gen AMD EPYC™ Product: 2nd Gen AMD EPYC™

Description

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Affected products

Vendor	Product	Affected	Fixed
AMD	1st Gen AMD EPYC™	unspecified – < NaplesPI-SP3_1.0.0.G	NaplesPI-SP3_1.0.0.G
AMD	2nd Gen AMD EPYC™	unspecified – < RomePI-SP3_1.0.0.C	RomePI-SP3_1.0.0.C

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021