High severity7.2NVD Advisory· Published May 13, 2021· Updated Jun 17, 2026
CVE-2021-26311
CVE-2021-26311
Description
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Affected products
67- cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3101:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3151:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3201:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3251:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3255:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3351:-:*:*:*:*:*:*:*
- cpe:2.3:h:amd:epyc_embedded_3451:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004nvdVendor Advisory
News mentions
0No linked articles in our index yet.