CVE-2021-26348: Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory i

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• amd epyc 72f3 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7313 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7313p firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7343 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7373x firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 73f3 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7413 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7443 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7443p firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7453 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7473x firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 74f3 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7513 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7543 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7543p firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7573x firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 75f3 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7643 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7663 firmwarebefore milanpi-sp3_1.0.0.7
• amd epyc 7713 firmwarebefore milanpi-sp3_1.0.0.7

Versions reported by the vendor

Affected version ranges reported by the assigning authority (AMD). Independent of NVD's CPE analysis and usually ahead of it.

• AMD EPYC™ Processors

  • variousaffected

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2021-46771Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by
  31Monitor
• CVE-2021-26353Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state
  31Monitor
• CVE-2021-26324A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.
  31Monitor

Published before and after this one in the same product

• ← EarlierCVE-2021-26342May 11, 2022 · In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includ
  13Monitor
• ← EarlierCVE-2021-26347May 11, 2022 · Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in t
  18Monitor
• Later →CVE-2021-26349May 11, 2022 · Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest
  22Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.