← CVE Intelligence

CVE-2021-26398

AMD / 1st Gen EPYC PUBLISHED

Description (CNA)

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.

Affected (CNA)

Vendor / productVersions
AMD / 1st Gen EPYC affected various
AMD / 2nd Gen EPYCaffected Various
AMD / 3rd Gen EPYCaffected various

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.