Low severity3.3NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2021-26342

Description

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

Affected products

AMD/Epyc 7001 Firmware
cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7251 Firmware
cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7261 Firmware
cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7281 Firmware
cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 72f3 Firmware
cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7301 Firmware
cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7313 Firmware
cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7313p Firmware
cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7343 Firmware
cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7351 Firmware
cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7351p Firmware
cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7371 Firmware
cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7373x Firmware
cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 73f3 Firmware
cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7401 Firmware
cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7401p Firmware
cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7413 Firmware
cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7443 Firmware
cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7443p Firmware
cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7451 Firmware
cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7453 Firmware
cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7473x Firmware
cpe:2.3:o:amd:epyc_7473x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 74f3 Firmware
cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7501 Firmware
cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7513 Firmware
cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7543 Firmware
cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7543p Firmware
cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7551 Firmware
cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7551p Firmware
cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7573x Firmware
cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 75f3 Firmware
cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7601 Firmware
cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
Range: <naplespi-sp3_1.0.0.h
AMD/Epyc 7643 Firmware
cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7663 Firmware
cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7713 Firmware
cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7713p Firmware
cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7763 Firmware
cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/Epyc 7773x Firmware
cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
Range: <milanpi-sp3_1.0.0.7
AMD/SEV guest VMsllm-create
osv-coords31 versions
pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/kernel-firmware&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/kernel-firmware&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 20210208-150300.4.10.1+ 30 more
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20210208-150300.4.10.1
- (no CPE)range: < 20220509-150400.4.5.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20191118-150000.3.42.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20200107-150100.3.31.1
- (no CPE)range: < 20190618-5.25.2
- (no CPE)range: < 20190618-5.25.2
AMD/AMD processorscpe-rescue
Range: various

Patches

Vulnerability mechanics

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000