high7.1
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's inte…
Impact
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Epyc 7002 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7001 Firmware | before naplespi-sp3_1.0.0.g |
| Amd | Epyc 7232p Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7252 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7262 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7272 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7282 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7302 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7302p Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7352 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7402 Firmware | before romepi-sp3_1.0.0.c |
| Amd | Epyc 7402p Firmware | before romepi-sp3_1.0.0.c |