medium4.4
CVE-2021-26396
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
Impact
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7003 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 72f3 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7313 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7313p Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7343 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7373x Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 73f3 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7413 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7443 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7443p Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 7453 Firmware | before milanpi-sp3_1.0.0.9 |
| Amd | Epyc 74f3 Firmware | before milanpi-sp3_1.0.0.9 |