CVE-2021-26312
PSP protection against improperly configured side channels may lead to potential information...
5.5 Medium
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
0.25%Down 0.2 points since Nov 17, 2021
What each source reports
NVD Score used
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
- Record
CVE-2021-26312- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-665, CWE-668
- Updated
- 2026-11-02
CVE List No score
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
- Record
CVE-2021-26312- Weakness
- CWE-665
- Updated
- 2026-11-02
EUVDEUVD-2021-13118 No score
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
- Record
EUVD-2021-13118- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vxp2-rm45-4pjg
PSP protection against improperly configured side channels may lead to potential information...
PSP protection against improperly configured side channels may lead to potential information disclosure. This issue affects: AMD 1st Gen AMD EPYC™ versions prior to NaplesPI-SP3_1.0.0.G. AMD 2nd Gen AMD EPYC™ versions prior to RomePI-SP3_1.0.0.C. AMD 3rd Gen AMD EPYC™ versions prior to MilanPI-SP3_1.0.0.4.
- Record
GHSA-vxp2-rm45-4pjg- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-668
- Updated
- 2026-11-02
OSVSUSE-SU-2022:1751-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):
- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
- Record
SUSE-SU-2022:1751-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1840-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1840-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1846-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1846-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1847-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update AMD ucode and SEV firmware
- (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, CVE-2021-46744, bsc#1199459, bsc#1199470)
- Record
SUSE-SU-2022:1847-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1923-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update to version 20220411 (git commit f219d616f42b, bsc#1199459):
- CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26350, CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339, CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349, CVE-2021-26364, CVE-2021-26312: Update AMD cpu microcode
Update to version 20220309 (git commit cd01f857da28, bsc#1199470):
- CVE-2021-46744: Ciphertext Side Channels on AMD SEV
Update Intel Bluetooth firmware (INTEL-SA-00604, bsc#1195786):
- CVE-2021-33139, CVE-2021-33155: Improper conditions check in the firmware for some Intel Wireless Bluetooth and Killer Bluetooth products may allow an authenticated user to potentially cause denial of service via adjacent access.
- Record
SUSE-SU-2022:1923-1- Updated
- 2026-11-02
Affected products
- amd athlon™ series
- amd epyc 7232p firmware
- amd epyc 7251 firmware
- amd epyc 7252 firmware
- amd epyc 7261 firmware
- amd epyc 7262 firmware
- amd epyc 7272 firmware
- amd epyc 7281 firmware
- amd epyc 7282 firmware
- amd epyc 72f3 firmware
- amd epyc 7301 firmware
- amd epyc 7302 firmware
Show 48 moreShow less
- amd epyc 7302p firmware
- amd epyc 7313 firmware
- amd epyc 7313p firmware
- amd epyc 7343 firmware
- amd epyc 7351 firmware
- amd epyc 7351p firmware
- amd epyc 7352 firmware
- amd epyc 7371 firmware
- amd epyc 73f3 firmware
- amd epyc 7401 firmware
- amd epyc 7402 firmware
- amd epyc 7402p firmware
- amd epyc 7413 firmware
- amd epyc 7443 firmware
- amd epyc 7443p firmware
- amd epyc 7451 firmware
- amd epyc 7452 firmware
- amd epyc 7453 firmware
- amd epyc 74f3 firmware
- amd epyc 7501 firmware
- amd epyc 7502 firmware
- amd epyc 7502p firmware
- amd epyc 7513 firmware
- amd epyc 7532 firmware
- amd epyc 7542 firmware
- amd epyc 7543 firmware
- amd epyc 7543p firmware
- amd epyc 7551 firmware
- amd epyc 7551p firmware
- amd epyc 7552 firmware
- amd epyc 75f3 firmware
- amd epyc 7601 firmware
- amd epyc 7642 firmware
- amd epyc 7643 firmware
- amd epyc 7662 firmware
- amd epyc 7663 firmware
- amd epyc 7702 firmware
- amd epyc 7702p firmware
- amd epyc 7713 firmware
- amd epyc 7713p firmware
- amd epyc 7742 firmware
- amd epyc 7763 firmware
- amd epyc 7f32 firmware
- amd epyc 7f52 firmware
- amd epyc 7f72 firmware
- amd epyc 7h12 firmware
- amd epyc™ processors
- amd ryzen™ series
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Manager Proxy 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Manager Retail Branch Server 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Manager Server 4.1 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Enterprise Storage 6 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Enterprise Storage 7 From an advisory covering 18 CVEs |
before 20200107-150100.3.31.1 | 20200107-150100.3.31.1 |
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.1 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.2 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareopenSUSE:Leap 15.3 From an advisory covering 15 CVEs |
before 20210208-150300.4.10.1 | 20210208-150300.4.10.1 |
kernel-firmwareSUSE:OpenStack Cloud 9 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 15 CVEs |
before 20190618-5.25.2 | 20190618-5.25.2 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 15 CVEs |
before 20191118-150000.3.42.1 | 20191118-150000.3.42.1 |
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 17 CVEs |
before 20220509-150400.4.5.1 | 20220509-150400.4.5.1 |
kernel-firmwareopenSUSE:Leap 15.4 From an advisory covering 17 CVEs |
before 20220509-150400.4.5.1 | 20220509-150400.4.5.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-26312 is a medium vulnerability (CVSS 5.5) in Amd Athlon™ Series, published November 16, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.
References
amd.com/en/corporate/product-security/bulletin/amd-sb-1027
nvd.nist.gov/vuln/detail/CVE-2021-26312
github.com/advisories/GHSA-vxp2-rm45-4pjg
suse.com/support/update/announcement/2022/suse-su-20221751-1
Show 26 moreShow less
bugzilla.suse.com/1192953