CVE-2021-26322 Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”

Description

Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

Affected products and versions

Product	Affected versions	Fixed in
1st Gen AMD EPYC™	Versions not published
2nd Gen AMD EPYC™	Versions not published
3rd Gen AMD EPYC™	Versions not published

Other CVEs of 1st Gen AMD EPYC™

The 9 CVEs of 1st Gen AMD EPYC™ →

CVE-2023-20520 Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a… 9.8 Critical CVE-2021-26408 Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration… Not rated CVE-2021-26330 AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources Not rated CVE-2020-12954 A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections,… Not rated