NetSight
medium6.5

CVE-2021-26403

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

Impact

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.

Affected products

VendorProductAffected versions
AmdEpyc 7001 Firmware
before naplespi_1.0.0.e
AmdEpyc 7251 Firmware
before naplespi_1.0.0.e
AmdEpyc 7261 Firmware
before naplespi_1.0.0.e
AmdEpyc 7281 Firmware
before naplespi_1.0.0.e
AmdEpyc 7301 Firmware
before naplespi_1.0.0.e
AmdEpyc 7351 Firmware
before naplespi_1.0.0.e
AmdEpyc 7351p Firmware
before naplespi_1.0.0.e
AmdEpyc 7371 Firmware
before naplespi_1.0.0.e
AmdEpyc 7401 Firmware
before naplespi_1.0.0.e
AmdEpyc 7401p Firmware
before naplespi_1.0.0.e
AmdEpyc 7451 Firmware
before naplespi_1.0.0.e
AmdEpyc 7501 Firmware
before naplespi_1.0.0.e

Weakness classification

References