CVE-2021-26318
Side-channels Related to the x86 PREFETCH Instruction
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
- Record
CVE-2021-26318- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 1.9 Low
AV:L/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-208, CWE-203
- Updated
- 2026-11-02
CVE List No score
Side-channels Related to the x86 PREFETCH Instruction
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
- Record
CVE-2021-26318- Weakness
- CWE-208
- Updated
- 2026-11-02
EUVDEUVD-2021-13124 No score
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
- Record
EUVD-2021-13124- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8rf7-vpj6-3967 No score
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD...
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
- Record
GHSA-8rf7-vpj6-3967- Weakness
- CWE-203
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-26318
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
- Record
UBUNTU-CVE-2021-26318- CVSS 3.1
- 4.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11242-1 No score
spectre-meltdown-checker-26.36.0602723-1.1 on GA media
These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11242-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spectre-meltdown-checkeropenSUSE:Tumbleweed From an advisory covering 28 CVEs |
before 26.36.0602723-1.1 | 26.36.0602723-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-26318 is a medium vulnerability (CVSS 4.7) in Amd All Supported Processors, published October 13, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 25th percentile. No source names a fixed version.
References
amd.com/en/corporate/product-security/bulletin/amd-sb-1017
nvd.nist.gov/vuln/detail/CVE-2021-26318
github.com/advisories/GHSA-8rf7-vpj6-3967
ubuntu.com/security/CVE-2021-26318
cve.org/CVERecord?id=CVE-2021-26318
suse.com/security/cve/CVE-2017-5715
Show 27 moreShow less