Code injection

2022-05-1117:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.

CPENameOperatorVersion
epyc_7001_firmwareeq< naplespisp31.0.0.h
epyc_7251_firmwareeq< naplespisp31.0.0.h
epyc_7261_firmwareeq< naplespisp31.0.0.h
epyc_7281_firmwareeq< naplespisp31.0.0.h
epyc_72f3_firmwareeq< milanpisp31.0.0.7
epyc_7301_firmwareeq< naplespisp31.0.0.h
epyc_7313_firmwareeq< milanpisp31.0.0.7
epyc_7313p_firmwareeq< milanpisp31.0.0.7
epyc_7343_firmwareeq< milanpisp31.0.0.7
epyc_7351_firmwareeq< naplespisp31.0.0.h

Name	Operator	Version
epyc_7001_firmware	eq	< naplespisp31.0.0.h
epyc_7251_firmware	eq	< naplespisp31.0.0.h
epyc_7261_firmware	eq	< naplespisp31.0.0.h
epyc_7281_firmware	eq	< naplespisp31.0.0.h
epyc_72f3_firmware	eq	< milanpisp31.0.0.7
epyc_7301_firmware	eq	< naplespisp31.0.0.h
epyc_7313_firmware	eq	< milanpisp31.0.0.7
epyc_7313p_firmware	eq	< milanpisp31.0.0.7
epyc_7343_firmware	eq	< milanpisp31.0.0.7
epyc_7351_firmware	eq	< naplespisp31.0.0.h