NetSight
low3.3

CVE-2021-26342

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a ne…

Impact

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

Affected products

VendorProductAffected versions
AmdEpyc 7763 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7713p Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7713 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7663 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7643 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 75f3 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7543p Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7543 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7513 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.7

References