medium5.5
CVE-2021-26321
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.
Impact
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7601 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7551p Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7551 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7501 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7451 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7401 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7371 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7351p Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7351 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7301 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7281 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7261 Firmware | before naplespi-sp3_1.0.0.g |