CVE-2021-26342 - CVE House
Back to Database
Status published Low CVE-2021-26342

In SEV guest VMs, the CPU may fail to flush...

Vulnerability Description

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26342

Credits & Attribution

No credits recorded in the NVD database.

References

More from AMD

View All →
CVE-2025-66664
Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC...
Medium 4.6
CVE-2025-66660
Insufficient parameter sanitization in TEE SOC Driver could allow an...
Low 1.8
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow...
High 7
CVE-2025-62627
An untrusted pointer dereference in the ionic cloud driver for...
High 7.2
CVE-2025-62626
Improper handling of insufficient entropy in the AMD CPUs could...
High 7.2

Affected Vendor

Affected Software

EPYC™ Processors
Vulnerable Versions:
various

Timeline

Official Publish: May 11th, 2022
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.