In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.
How to fix
Remediation Available
epyc 7001 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7251 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7261 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7281 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 72f3 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7301 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7313 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7313p firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7343 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7351 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7351p firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7371 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7373x firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 73f3 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7401 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7401p firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7413 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7443 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7443p firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7451 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7453 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7473x firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 74f3 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7501 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7513 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7543 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7543p firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7551 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7551p firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7573x firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 75f3 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7601 firmwareNVD
Affected:< naplespi-sp3_1.0.0.hFixed in:naplespi-sp3_1.0.0.hCVE-2021-26342derived from NVD
epyc 7643 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7663 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7713 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7713p firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7763 firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
epyc 7773x firmwareNVD
Affected:< milanpi-sp3_1.0.0.7Fixed in:milanpi-sp3_1.0.0.7CVE-2021-26342derived from NVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Exploit Intelligence
0.21%probability of exploitation in 30 days
12thpercentile
Low risk: more likely to be exploited than 12% of all known CVEs.
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.
