Description (CNA)
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD EPYC™ 7003 Processors | unaffected MilanPI 1.0.0.C |
| AMD / AMD EPYC™ 9004 Processors | unaffected GenoaPI 1.0.0.B |
| AMD / AMD EPYC™ Embedded 7003 | unaffected "EmbMilanPI-SP3 1.0.0.8" |
| AMD / AMD EPYC™ Embedded 9004 | unaffected EmbGenoaPI-SP5 1.0.0.6 |
CWE
CWE-459
References
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
- https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
ADP enrichment
No English description supplied.
No references supplied.