CVEvulnerability
CVE-2021-26311
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-05-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-77
Description
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Affected configurations
• amd epyc 7232p
• amd epyc 7251
• amd epyc 7252
• amd epyc 7261
• amd epyc 7262
• amd epyc 7272
• amd epyc 7281
• amd epyc 7282
• amd epyc 72f3
• amd epyc 7301
• amd epyc 7302
• amd epyc 7302p
• amd epyc 7313
• amd epyc 7313p
• amd epyc 7343
• amd epyc 7351
• amd epyc 7351p
• amd epyc 7352
• amd epyc 7371
• amd epyc 73f3
• amd epyc 7401
• amd epyc 7401p
• amd epyc 7402
• amd epyc 7402p
• amd epyc 7413
• amd epyc 7443
• amd epyc 7443p
• amd epyc 7451
• amd epyc 7452
• amd epyc 7453
• amd epyc 74f3
• amd epyc 7501
• amd epyc 7502
• amd epyc 7502p
• amd epyc 7513
• amd epyc 7532
• amd epyc 7542
• amd epyc 7543
• amd epyc 7543p
• amd epyc 7551
• amd epyc 7551p
• amd epyc 7552
• amd epyc 75f3
• amd epyc 7601
• amd epyc 7642
• amd epyc 7643
• amd epyc 7662
• amd epyc 7663
• amd epyc 7702
• amd epyc 7702p
• amd epyc 7713
• amd epyc 7713p
• amd epyc 7742
• amd epyc 7763
• amd epyc 7f32
• amd epyc 7f52
• amd epyc 7f72
• amd epyc 7h12
• amd epyc embedded 3101
• amd epyc embedded 3151
… and 5 more
Related
Weakness · CWE (1)
- CWE-77 Improper Neutralization of Special Elements used in a Command weakness