CVE-2021-26398

No fix known EPSS <1%CVSS 7.8

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential arbitrary code execution.

Published 2023-01-10 · CVE record · OSV

Products: AMD 1st Gen EPYC, AMD 2nd Gen EPYC, AMD 3rd Gen EPYC