CVE-2021-26314
AMD Speculative execution with Floating-Point Value Injection
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.
Una inyección de valor de punto flotante potencial en todos los productos de CPU compatibles, junto con las vulnerabilidades de software relacionadas con la ejecución especulativa con resultados de punto flotante incorrectos, puede causar el uso de datos incorrectos de FPVI y puede resultar en una filtración de datos
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-29 CVE Reserved
- 2021-06-09 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-17 CVE Updated
- 2024-09-17 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-203: Observable Discrepancy
- CWE-208: Observable Timing Discrepancy
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2021/06/09/2 | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2021/06/10/1 | 2024-09-17 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen 5 5600x Search vendor "Amd" for product "Ryzen 5 5600x" | - | - |
Safe
|
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen 7 2700x Search vendor "Amd" for product "Ryzen 7 2700x" | - | - |
Safe
|
| Xen Search vendor "Xen" | Xen Search vendor "Xen" for product "Xen" | * | - |
Affected
| in | Amd Search vendor "Amd" | Ryzen Threadripper 2990wx Search vendor "Amd" for product "Ryzen Threadripper 2990wx" | - | - |
Safe
|
| Arm Search vendor "Arm" | Cortex-a72 Search vendor "Arm" for product "Cortex-a72" | - | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Bcm2711 Search vendor "Broadcom" for product "Bcm2711" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I7-10700k Search vendor "Intel" for product "Core I7-10700k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I7-7700k Search vendor "Intel" for product "Core I7-7700k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Core I9-9900k Search vendor "Intel" for product "Core I9-9900k" | - | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Xeon Silver 4214 Search vendor "Intel" for product "Xeon Silver 4214" | - | - |
Affected
| ||||||
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 33 Search vendor "Fedoraproject" for product "Fedora" and version "33" | - |
Affected
| ||||||
| Fedoraproject Search vendor "Fedoraproject" | Fedora Search vendor "Fedoraproject" for product "Fedora" | 34 Search vendor "Fedoraproject" for product "Fedora" and version "34" | - |
Affected
| ||||||