CVE-2021-26396

Published Jan 10, 2023 CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Description
Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-13202 Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
Apr 9, 2025, 2:54 PM
Reserved
Jan 29, 2021, 9:24 PM
Status
Modified
Published
Jan 11, 2023, 8:15 AM
Modified
Jun 17, 2026, 3:43 AM