CVE-2021-26327 Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality

Description

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Affected products and versions

Product	Affected versions	Fixed in
3rd Gen AMD EPYC™	Versions not published

Other CVEs of 3rd Gen AMD EPYC™

The 28 CVEs of 3rd Gen AMD EPYC™ →

CVE-2023-20520 Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a… 9.8 Critical CVE-2023-20524 An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an… 7.5 High CVE-2022-23818 Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP… 7.5 High CVE-2021-46775 Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites,… 6.8 Medium