High severity7.1NVD Advisory· Published May 10, 2022· Updated Jun 17, 2026
CVE-2021-26408
CVE-2021-26408
Description
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Affected products
41cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:amd:epyc_7232p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7552_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7642_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:amd:epyc_7272_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7402p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7702p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7742_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7282_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7542_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7302_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7502p_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7351p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- cpe:2.3:o:amd:epyc_7401p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:amd:epyc_7532_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7f32_firmware:*:*:*:*:*:*:*:*range: <romepi-sp3_1.0.0.c
- cpe:2.3:o:amd:epyc_7551p_firmware:*:*:*:*:*:*:*:*Range: <naplespi-sp3_1.0.0.g
- AMD/1st Gen AMD EPYC™v5Range: unspecified
- AMD/2nd Gen AMD EPYC™v5Range: unspecified
Patches
Vulnerability mechanics
References
1- www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021nvdVendor Advisory
News mentions
0No linked articles in our index yet.