Description
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1023
Scores
CVSS v3
8.4
EPSS
0.0006
EPSS Percentile
18.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Details
Status
published
Products (50)
amd/epyc_7001_firmware
amd/epyc_7232p_firmware
amd/epyc_7251_firmware
amd/epyc_7252_firmware
amd/epyc_7261_firmware
amd/epyc_7262_firmware
amd/epyc_7272_firmware
amd/epyc_7281_firmware
amd/epyc_7282_firmware
amd/epyc_72f3_firmware
... and 40 more
Published
Dec 10, 2021
Tracked Since
Feb 18, 2026