7.8
High
CVE-2021-26398 Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an…
Description
Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 1st Gen EPYC | Versions not published | |
| 2nd Gen EPYC | Versions not published | |
| 3rd Gen EPYC | Versions not published |
Other CVEs of 1st Gen EPYC
The 5 CVEs of 1st Gen EPYC →
CVE-2023-20527
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds,…
6.5
Medium
CVE-2021-46779
Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an…
7.1
High
CVE-2021-26403
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in…
6.5
Medium
CVE-2021-26316
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper…
7.8
High