VYPR
← All advisories
High severity7.5NVD Advisory· Published May 9, 2023· Updated Jun 17, 2026

CVE-2021-26406

CVE-2021-26406

Description

Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.

Affected products

55
  • AMD/Epyc 7642 Firmware3 versions
    cpe:2.3:o:amd:epyc_7232p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7232p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7552_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7642_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7251 Firmware
    cpe:2.3:o:amd:epyc_7251_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7252 Firmware
    cpe:2.3:o:amd:epyc_7252_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7261 Firmware
    cpe:2.3:o:amd:epyc_7261_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7262 Firmware
    cpe:2.3:o:amd:epyc_7262_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7742 Firmware4 versions
    cpe:2.3:o:amd:epyc_7272_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:amd:epyc_7272_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7402p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7702p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7742_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7281 Firmware
    cpe:2.3:o:amd:epyc_7281_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7542 Firmware2 versions
    cpe:2.3:o:amd:epyc_7282_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7282_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7542_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7301 Firmware
    cpe:2.3:o:amd:epyc_7301_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7302 Firmware2 versions
    cpe:2.3:o:amd:epyc_7302_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:amd:epyc_7302_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7502p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7302p Firmware
    cpe:2.3:o:amd:epyc_7302p_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7351 Firmware
    cpe:2.3:o:amd:epyc_7351_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7351p Firmware
    cpe:2.3:o:amd:epyc_7351p_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7352 Firmware
    cpe:2.3:o:amd:epyc_7352_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7371 Firmware
    cpe:2.3:o:amd:epyc_7371_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7401 Firmware
    cpe:2.3:o:amd:epyc_7401_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7401p Firmware
    cpe:2.3:o:amd:epyc_7401p_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7402 Firmware
    cpe:2.3:o:amd:epyc_7402_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7451 Firmware
    cpe:2.3:o:amd:epyc_7451_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7452 Firmware
    cpe:2.3:o:amd:epyc_7452_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7501 Firmware
    cpe:2.3:o:amd:epyc_7501_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7502 Firmware
    cpe:2.3:o:amd:epyc_7502_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7f32 Firmware3 versions
    cpe:2.3:o:amd:epyc_7532_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:amd:epyc_7532_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7f32_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
    • cpe:2.3:o:amd:epyc_7h12_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7551 Firmware
    cpe:2.3:o:amd:epyc_7551_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7551p Firmware
    cpe:2.3:o:amd:epyc_7551p_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7571 Firmware
    cpe:2.3:o:amd:epyc_7571_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7601 Firmware
    cpe:2.3:o:amd:epyc_7601_firmware:naplespi_1.0.0.e:*:*:*:*:*:*:*
  • AMD/Epyc 7662 Firmware
    cpe:2.3:o:amd:epyc_7662_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7702 Firmware
    cpe:2.3:o:amd:epyc_7702_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7f52 Firmware
    cpe:2.3:o:amd:epyc_7f52_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/Epyc 7f72 Firmware
    cpe:2.3:o:amd:epyc_7f72_firmware:romepi_1.0.0.a:*:*:*:*:*:*:*
  • AMD/SEV-ESllm-fuzzy
  • AMD/SEVllm-fuzzy
  • AMD/EPYC Processorscpe-rescue2 versions
    various + 1 more
    • (no CPE)range: various
    • (no CPE)range: various
  • AMD/2nd Gen AMD Ryzen™ Threadripper™ Processors “Colfax”v5
    Range: various
  • AMD/3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDTv5
    Range: various
  • AMD/AMD Ryzen™ 5000 Series Desktop Processors “Vermeer” AM4v5
    Range: various
  • AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”v5
    Range: various
  • AMD/Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULPv5
    Range: various
  • AMD/Ryzen™ 2000 Series Desktop Processors “Pinnacle Ridge”v5
    Range: various
  • AMD/Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4v5
    Range: various
  • AMD/Ryzen™ 2000 Series Mobile Processors “Raven Ridge” FP5v5
    Range: various
  • AMD/Ryzen™ 3000 Series Desktop Processors “Matisse” AM4v5
    Range: various
  • AMD/Ryzen™ 3000 Series Mobile processor, 2nd Gen AMD Ryzen™ Mobile Processors with Radeon™ Graphics “Picasso”v5
    Range: various
  • AMD/Ryzen™ Threadripper™ PRO Processors “Castle Peak” WSv5
    Range: various

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.