VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 11, 2023· Updated Jun 17, 2026

CVE-2021-26398

CVE-2021-26398

Description

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.

Affected products

68
  • AMD/1st Gen EPYCv5
    Range: various
  • AMD/2nd Gen EPYCv5
    Range: Various
  • AMD/3rd Gen EPYCv5
    Range: various
  • AMD/AMD Secure Processor (ASP) Secure OSllm-fuzzy
  • AMD/Epyc 7302 Firmware2 versions
    cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7502 Firmware
    cpe:2.3:o:amd:epyc_7502_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7452 Firmware
    cpe:2.3:o:amd:epyc_7452_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7402 Firmware
    cpe:2.3:o:amd:epyc_7402_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7742 Firmware4 versions
    cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7352 Firmware
    cpe:2.3:o:amd:epyc_7352_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7302p Firmware
    cpe:2.3:o:amd:epyc_7302p_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7542 Firmware2 versions
    cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7262 Firmware
    cpe:2.3:o:amd:epyc_7262_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7252 Firmware
    cpe:2.3:o:amd:epyc_7252_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7642 Firmware3 versions
    cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7002 Firmware
    cpe:2.3:o:amd:epyc_7002_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7f32 Firmware3 versions
    cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7h12_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
    • cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi_1.0.0.c
  • AMD/Epyc 7f72 Firmware
    cpe:2.3:o:amd:epyc_7f72_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7f52 Firmware
    cpe:2.3:o:amd:epyc_7f52_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7702 Firmware
    cpe:2.3:o:amd:epyc_7702_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7662 Firmware
    cpe:2.3:o:amd:epyc_7662_firmware:*:*:*:*:*:*:*:*
    Range: <romepi_1.0.0.c
  • AMD/Epyc 7003 Firmware
    cpe:2.3:o:amd:epyc_7003_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 72f3 Firmware
    cpe:2.3:o:amd:epyc_72f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7313 Firmware
    cpe:2.3:o:amd:epyc_7313_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7313p Firmware
    cpe:2.3:o:amd:epyc_7313p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7343 Firmware
    cpe:2.3:o:amd:epyc_7343_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7373x Firmware
    cpe:2.3:o:amd:epyc_7373x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 73f3 Firmware
    cpe:2.3:o:amd:epyc_73f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7413 Firmware
    cpe:2.3:o:amd:epyc_7413_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7443 Firmware
    cpe:2.3:o:amd:epyc_7443_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7443p Firmware
    cpe:2.3:o:amd:epyc_7443p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7453 Firmware
    cpe:2.3:o:amd:epyc_7453_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 74f3 Firmware
    cpe:2.3:o:amd:epyc_74f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7513 Firmware
    cpe:2.3:o:amd:epyc_7513_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7543 Firmware
    cpe:2.3:o:amd:epyc_7543_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7543p Firmware
    cpe:2.3:o:amd:epyc_7543p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7573x Firmware
    cpe:2.3:o:amd:epyc_7573x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 75f3 Firmware
    cpe:2.3:o:amd:epyc_75f3_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7643 Firmware
    cpe:2.3:o:amd:epyc_7643_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7663 Firmware
    cpe:2.3:o:amd:epyc_7663_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7713 Firmware
    cpe:2.3:o:amd:epyc_7713_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7713p Firmware
    cpe:2.3:o:amd:epyc_7713p_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7743 Firmware
    cpe:2.3:o:amd:epyc_7743_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7763 Firmware
    cpe:2.3:o:amd:epyc_7763_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7773x Firmware
    cpe:2.3:o:amd:epyc_7773x_firmware:*:*:*:*:*:*:*:*
    Range: <milanpi_1.0.0.4
  • AMD/Epyc 7001 Firmware
    cpe:2.3:o:amd:epyc_7001_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7251 Firmware
    cpe:2.3:o:amd:epyc_7251_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7261 Firmware
    cpe:2.3:o:amd:epyc_7261_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7281 Firmware
    cpe:2.3:o:amd:epyc_7281_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7301 Firmware
    cpe:2.3:o:amd:epyc_7301_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7351 Firmware
    cpe:2.3:o:amd:epyc_7351_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7371 Firmware
    cpe:2.3:o:amd:epyc_7371_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7401 Firmware
    cpe:2.3:o:amd:epyc_7401_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7401p Firmware
    cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7451 Firmware
    cpe:2.3:o:amd:epyc_7451_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7501 Firmware
    cpe:2.3:o:amd:epyc_7501_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7551 Firmware
    cpe:2.3:o:amd:epyc_7551_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7551p Firmware
    cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h
  • AMD/Epyc 7601 Firmware
    cpe:2.3:o:amd:epyc_7601_firmware:*:*:*:*:*:*:*:*
    Range: <naplespi_1.0.0.h

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.