Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-26408

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidential

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD 1st Gen AMD EPYC™

  • unspecified to < NaplesPI-SP3_1.0.0.Gaffected

AMD 2nd Gen AMD EPYC™

  • unspecified to < RomePI-SP3_1.0.0.Caffected

References