Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2021-26401
HistoryMar 09, 2022 - 10:23 a.m.

CVE-2021-26401

2022-03-0910:23:54
redhat.com
access.redhat.com
56
amd
cpus
speculative execution
flaw
mitigation
retpoline

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.975

Percentile

100.0%

JSON

A flaw was found in hw. The speculative execution window of AMD LFENCE/JMP mitigation (MITIGATION V2-2) may be large enough to be exploited on AMD CPUs.

Mitigation

AMD recommends mitigation that uses generic retpoline.

Related

ubuntucve 1
nessus 76
amd 1
debiancve 2
cve 1
redhat 36
cvelist 1
f5 1
prion 1
nvd 1
rosalinux 1
centos 4
openvas 35
oraclelinux 7
citrix 1
veracode 1
amazon 3
cloudfoundry 1
paloalto 1
threatpost 1
suse 10
slackware 1
debian 2
virtuozzo 1
ubuntu 4
ibm 2
mageia 2
osv 1
ubuntucve
ubuntucve
CVE-2021-26401
2022-03-11 00:00:00
nessus
nessus
Oracle Linux 6 : kernel (ELSA-2023-0187)
2023-10-24 00:00:00
RHEL 6 : kernel (RHSA-2023:0187)
2023-01-17 00:00:00
CentOS 7 : kernel-rt (RHSA-2023:0400)
2024-01-09 00:00:00
amd
amd
LFENCE/JMP Mitigation Update for CVE-2017-5715
2022-03-08 00:00:00
debiancve
debiancve
CVE-2021-26401
2022-03-11 18:15:11
CVE-2017-5715
2018-01-04 13:29:00
cve
cve
CVE-2021-26401
2022-03-11 18:15:11
redhat
redhat
(RHSA-2023:0187) Moderate: kernel security update
2023-01-17 08:48:58
(RHSA-2023:0399) Important: kernel security and bug fix update
2023-01-24 09:46:52
(RHSA-2023:0400) Important: kernel-rt security and bug fix update
2023-01-24 09:46:52
cvelist
cvelist
CVE-2021-26401
2022-03-08 00:00:00
f5
f5
K000137188 : AMD CPU vulnerability CVE-2021-26401
2023-10-09 00:00:00
prion
prion
Design/Logic Flaw
2022-03-11 18:15:00
nvd
nvd
CVE-2021-26401
2022-03-11 18:15:11
rosalinux
rosalinux
Advisory ROSA-SA-2023-2097
2023-02-07 10:10:41
centos
centos
bpftool, kernel, perf, python security update
2023-01-30 16:50:20
libvirt security update
2018-01-04 21:10:02
iwl100, iwl1000, iwl105, iwl135, iwl2000, iwl2030, iwl3160, iwl3945, iwl4965, iwl5000, iwl5150, iwl6000, iwl6000g2a, iwl6000g2b, iwl6050, iwl7260, iwl7265, linux security update
2018-01-17 16:51:32
openvas
openvas
CentOS: Security Advisory for bpftool (CESA-2023:0399)
2023-01-31 00:00:00
RedHat Update for libvirt RHSA-2018:0029-01
2018-01-05 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0009-1)
2021-06-09 00:00:00
oraclelinux
oraclelinux
kernel security update
2023-10-20 00:00:00
qemu-kvm security update
2018-01-04 00:00:00
microcode_ctl security update
2018-01-17 00:00:00
citrix
citrix
Citrix Hypervisor Security Update
2022-03-07 14:55:18
veracode
veracode
Information Disclosure
2022-06-23 22:13:13
amazon
amazon
Important: qemu-kvm
2018-02-07 18:49:00
Important: qemu-kvm
2018-01-12 21:24:00
Important: microcode_ctl
2018-02-07 18:54:00
cloudfoundry
cloudfoundry
USN-3690-2: AMD Microcode regression | Cloud Foundry
2018-07-19 00:00:00
paloalto
paloalto
Meltdown and Spectre update for WildFire-500 Appliance
2018-05-15 21:35:00
threatpost
threatpost
Intel Halts Spectre Fixes On Older Chips, Citing Limited Ecosystem Support
2018-04-04 15:18:47
suse
suse
Security update for kernel-firmware (important)
2018-01-09 18:09:16
Security update for qemu (important)
2018-01-04 18:10:48
Security update for microcode_ctl (important)
2018-03-16 18:07:30
slackware
slackware
[slackware-security] Slackware 14.2 kernel
2018-02-07 06:34:12
debian
debian
[SECURITY] [DSA 4179-1] linux-tools security update
2018-04-24 13:15:06
[SECURITY] [DLA 2148-1] amd64-microcode security update
2020-03-20 19:56:36
virtuozzo
virtuozzo
Kernel update: new kernel 3.10.0-693.21.1.vz7.46.7, Virtuozzo 7.0 Update 7 Hotfix 2 (7.0.7-453)
2018-04-28 00:00:00
ubuntu
ubuntu
Intel Microcode update
2018-01-11 00:00:00
libvirt update
2018-02-07 00:00:00
intel-microcode update
2018-03-29 00:00:00
ibm
ibm
Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to the vulnerability known as Spectre (CVE-2017-5715)
2023-04-18 18:22:18
Security Bulletin: IBM Security Guardium is affected by a Using Components (microcode_ctl) with Known Vulnerabilities vulnerability
2018-12-19 20:45:01
mageia
mageia
Updated microcode packages fix security vulnerabilities
2018-01-13 17:28:36
Updated gcc packages fix security vulnerability
2018-02-08 14:30:47
osv
osv
CVE-2017-5715
2018-01-04 13:29:00

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.975

Percentile

100.0%

JSON
Related for RH:CVE-2021-26401
ubuntucve1nessus76amd1debiancve2cve1redhat36cvelist1f51prion1nvd1rosalinux1centos4openvas35oraclelinux7citrix1veracode1amazon3cloudfoundry1paloalto1threatpost1suse10slackware1debian2virtuozzo1ubuntu4ibm2mageia2osv1