NetSight
medium5.5

CVE-2021-26349

Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (M…

Impact

Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).

Affected products

VendorProductAffected versions
AmdEpyc 7763 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7713p Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7713 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7663 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7643 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 75f3 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7543p Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7543 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7513 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7453 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 74f3 Firmware
before milanpi-sp3_1.0.0.7
AmdEpyc 7443p Firmware
before milanpi-sp3_1.0.0.7

References