CVE-2021-26313
AMD Speculative Code Store Bypass
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.
Una potencial omisión de almacenamiento de código especulativo en todos los productos de CPU compatibles, junto con las vulnerabilidades de software relacionadas con la ejecución especulativa de instrucciones sobrescritas, puede causar una especulación inapropiada y podría resultar en una filtración de datos
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-29 CVE Reserved
- 2021-06-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-203: Observable Discrepancy
- CWE-208: Observable Timing Discrepancy
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003 | 2022-08-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen 5 5600x Search vendor "Amd" for product "Ryzen 5 5600x" | - | - |
Safe
|
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen 7 2700x Search vendor "Amd" for product "Ryzen 7 2700x" | - | - |
Safe
|
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen Threadripper 2990wx Search vendor "Amd" for product "Ryzen Threadripper 2990wx" | - | - |
Safe
|
| Arm Search vendor "Arm" | Cortex-a72 Search vendor "Arm" for product "Cortex-a72" | - | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Bcm2711 Search vendor "Broadcom" for product "Bcm2711" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I7-10700k Search vendor "Intel" for product "Core I7-10700k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I7-7700k Search vendor "Intel" for product "Core I7-7700k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I9-9900k Search vendor "Intel" for product "Core I9-9900k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Xeon Silver 4214 Search vendor "Intel" for product "Xeon Silver 4214" | - | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0" | - |
Affected
| ||||||