Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-26408

No fix known EPSS <1%

Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.

Published 2022-05-10 · CVE record · OSV

Products: 1st Gen AMD EPYC™, 2nd Gen AMD EPYC™