Not rated
CVE-2021-26320 Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local…
Description
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1st Gen AMD EPYC™ | Versions not published | |
| 2nd Gen AMD EPYC™ | Versions not published | |
| 3rd Gen AMD EPYC™ | Versions not published |
Other CVEs of 1st Gen AMD EPYC™
The 9 CVEs of 1st Gen AMD EPYC™ →
CVE-2023-20520
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a…
9.8
Critical
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration…
Not rated
CVE-2021-26330
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources
Not rated
CVE-2020-12954
A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,…
Not rated