CVE-2021-26328

MEDIUM

SNP - Memory Corruption

Title source: llm

Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.

CVSS v3 4.4

EPSS 0.0006

EPSS Percentile 19.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-358

Status published

Products (24)

amd/epyc_7003_firmware < milanpi_1.0.0.8

amd/epyc_72f3_firmware < milanpi_1.0.0.8

amd/epyc_7313_firmware < milanpi_1.0.0.8

amd/epyc_7313p_firmware < milanpi_1.0.0.8

amd/epyc_7343_firmware < milanpi_1.0.0.8

amd/epyc_7373x_firmware < milanpi_1.0.0.8

amd/epyc_73f3_firmware < milanpi_1.0.0.8

amd/epyc_7413_firmware < milanpi_1.0.0.8

amd/epyc_7443_firmware < milanpi_1.0.0.8

amd/epyc_7443p_firmware < milanpi_1.0.0.8

... and 14 more

Published Jan 11, 2023

Tracked Since Feb 18, 2026