CVE-2021-26312 Privilege escalation in Athlon™ Series

Medium 5.5 Published 16 Nov 2021 Updated 16 Sep 2024

A missing TLB flush in AMD IOMMU allows malicious IO devices to write to unauthorized memory, compromising system integrity and enabling privilege escalation.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2021-26312?

CVE-2021-26312 is a medium-severity vulnerability in Amd Epyc 7232p Firmware, published on 16 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.

Weakness: CWE-668, CWE-665

Which versions are affected by CVE-2021-26312?

It affects 57 products.

Products include Amd Epyc 7232p Firmware, Amd Epyc 7251 Firmware, Amd Epyc 7252 Firmware, Amd Epyc 7261 Firmware, Amd Epyc 7262 Firmware, Amd Epyc 7272 Firmware and 51 more.

How do I fix CVE-2021-26312?

Apply the vendor's patch.

Is CVE-2021-26312 being exploited?

There is no known exploitation of CVE-2021-26312 in the wild and no public exploit code.

All Amd Epyc 7232p Firmware vulnerabilities

Sources

Also known as GHSA-vxp2-rm45-4pjg.