NetSight
medium5.5

CVE-2021-26320

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a de…

Impact

Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP

Affected products

VendorProductAffected versions
AmdEpyc 7601 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7551 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7501 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7451 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7401 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7371 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351p Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7351 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7301 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7281 Firmware
before naplespi-sp3_1.0.0.g
AmdEpyc 7261 Firmware
before naplespi-sp3_1.0.0.g

Weakness classification

References