CVE-2021-26311
Estado: ModificadaAlta (7.2)—
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.68%
- Percentil entre todas las CVEs puntuadas: 76
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (65)
AMD — Epyc 7232pAMD — Epyc 7251AMD — Epyc 7252AMD — Epyc 7261AMD — Epyc 7262AMD — Epyc 7272AMD — Epyc 7281AMD — Epyc 7282AMD — Epyc 72f3AMD — Epyc 7301AMD — Epyc 7302AMD — Epyc 7302pAMD — Epyc 7313AMD — Epyc 7313pAMD — Epyc 7343AMD — Epyc 7351AMD — Epyc 7351pAMD — Epyc 7352AMD — Epyc 7371AMD — Epyc 73f3AMD — Epyc 7401AMD — Epyc 7401pAMD — Epyc 7402AMD — Epyc 7402pAMD — Epyc 7413AMD — Epyc 7443AMD — Epyc 7443pAMD — Epyc 7451AMD — Epyc 7452AMD — Epyc 7453AMD — Epyc 74f3AMD — Epyc 7501AMD — Epyc 7502AMD — Epyc 7502pAMD — Epyc 7513AMD — Epyc 7532AMD — Epyc 7542AMD — Epyc 7543AMD — Epyc 7543pAMD — Epyc 7551AMD — Epyc 7551pAMD — Epyc 7552AMD — Epyc 75f3AMD — Epyc 7601AMD — Epyc 7642AMD — Epyc 7643AMD — Epyc 7662AMD — Epyc 7663AMD — Epyc 7702AMD — Epyc 7702pAMD — Epyc 7713AMD — Epyc 7713pAMD — Epyc 7742AMD — Epyc 7763AMD — Epyc 7f32AMD — Epyc 7f52AMD — Epyc 7f72AMD — Epyc 7h12AMD — Epyc Embedded 3101AMD — Epyc Embedded 3151AMD — Epyc Embedded 3201AMD — Epyc Embedded 3251AMD — Epyc Embedded 3255AMD — Epyc Embedded 3351AMD — Epyc Embedded 3451
CWE
- CWE-77
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-26311",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"authentication": "SINGLE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.2,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "HIGH",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.2
}
]
},
"affected": [
{
"source": "psirt@amd.com",
"affectedData": [
{
"vendor": "AMD",
"product": "SEV/SEV-ES",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "SEV-SNP",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-05-13T12:15:07.597",
"references": [
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004",
"tags": [
"Vendor Advisory"
],
"source": "psirt@amd.com"
},
{
"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor."
},
{
"lang": "es",
"value": "En la funcionalidad SEV/SEV-ES de AMD, la memoria puede ser reorganizada en el espacio de direcciones del invitado que no es detectado por el mecanismo de certificación que podría ser utilizado por un hypervisor malicioso para conllevar potencialmente a una ejecución de código arbitraria dentro de la VM invitada si un administrador malicioso tiene acceso para comprometer el hypervisor del servidor"
}
],
"lastModified": "2026-06-17T03:43:05.487",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:amd:epyc_7232p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16D55BEF-AFC8-45DC-9401-5DEF374E16C5"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7251:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "565383C4-F690-4E3B-8A6A-B7D4ACCFAA05"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7252:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B816918-6CCF-4010-AA16-7BF8A93AD7D1"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7261:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71ED05E6-8E69-41B9-9A36-CCE2D59A2603"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7262:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4FBBFDD3-A85D-43A3-AD67-D69E91C633B6"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7272:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F187412-26C2-4D8C-9199-D7CCF49D6520"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7281:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "805B4FEA-CFB2-429C-818B-9277B6D546C3"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7282:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26FC5683-F612-4586-8BA3-FB1F66D8868B"
},
{
"criteria": "cpe:2.3:h:amd:epyc_72f3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F98FF1A-3A2B-4CED-AEA2-9C4F2AC2D8C1"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7301:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F65FC5B9-0803-4D7F-8EF6-7B6681418596"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7302:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F7CB05E-C4F4-481F-AFB0-9288EBE6DB62"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7302p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A2E0AC0-8BDE-49F8-B067-DB03037921DD"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7313:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B02B61B7-7DD3-4164-8D32-EB961E981BC9"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7313p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9000686A-DC2B-4561-9C32-E90890EB2EBA"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7343:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71B9C24B-2C10-4826-A91B-E1C60665FBBE"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7351:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A5FC951-9FAD-45B4-B7CF-D1A9482507F5"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7351p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9BB78361-9AAD-44BD-8B30-65715FEA4C06"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7352:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1540CCD-1ED8-4B4E-AD43-7DE2689D9A21"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7371:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA7576CB-A818-47A1-9A0D-6B8FD105FF08"
},
{
"criteria": "cpe:2.3:h:amd:epyc_73f3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "678C5F58-8AE9-46FF-8F01-4CF394C87A2C"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7401:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C05F1EF0-3576-4D47-8704-36E9FAB1D432"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7401p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2E41A87-7A39-4BB2-88E4-16DF0D81BFD2"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7402:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "430C9955-0090-4166-8E90-D81C2AA7DE0D"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7402p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92EBDDBF-37C2-4D09-B744-F78169B2C1C3"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7413:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1766FF1-77A9-4293-B826-F6A8FBD7AFBF"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7443:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C474537-3006-41BA-8C3D-5C370E3ACECD"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7443p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E2B13CA-72F4-4CF6-9E12-62E6E9056A14"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7451:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51C8CF00-8FC8-4206-9028-6F104699DE76"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7452:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68ACF30E-62DD-4217-B7F0-4A0FFF47E8EF"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7453:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "241E39FF-FE66-444C-A4C2-3D28C45341BE"
},
{
"criteria": "cpe:2.3:h:amd:epyc_74f3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "02D08121-DC57-47D7-8214-23A209F0AF08"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7501:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E8BAB73-6F45-49AB-8F00-49A488006F3E"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7502:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49BBC687-5C3C-4843-A028-B8BE29D1E302"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7502p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "563708A3-7C51-4693-B02D-9A25A639FE42"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7513:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8264DF4-47B4-4716-AE89-44AFA870D385"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7532:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EDABE45-F529-453C-92DC-BF7747CEEC0E"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7542:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BC94B03B-A7FE-47AE-969D-FFEF278A7A9B"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7543:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52544912-FAA3-4025-A5FD-151B21CEC53B"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7543p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77A0A47B-74A1-4731-92A8-BC10FFE58ECF"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7551:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AAB403A-5A36-4DC3-A187-99127CF77BA7"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7551p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01BE5D42-1C62-4381-89E0-8F3264F696EC"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7552:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A6C7497-1B63-490F-B8EA-D9F3CB790952"
},
{
"criteria": "cpe:2.3:h:amd:epyc_75f3:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBF0AFED-588A-4EFB-8C90-9280BC3A6720"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7601:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "168076CD-1E6D-4328-AB59-4C1A90735AC4"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7642:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EDF8A1E-B259-43D0-A56C-8C2BB688A32C"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7643:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E1D79D-0CB0-4FD9-8A82-27CDFBFE07B2"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7662:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E8C6528-9100-41D2-88A2-FFEABAB8F86A"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7663:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7DFCB62-6CDF-4AD2-9265-1887E5780CA5"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7702:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AC99346-DBF1-4060-8E6B-35D315944ADA"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7702p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72C86198-0BD4-42E1-974B-70A49F82C411"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7713:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D698D3E-BB05-4C65-90F4-8DAE275CD6A4"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7713p:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2299ED50-B4D2-4BB3-AD87-56D552B84AE1"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7742:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88F4A126-B4A6-480A-9DD7-7F68714DFB49"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7763:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F900BDD-F094-41A6-9A23-31F53DBA95D4"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7f32:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E25652AB-E243-4C40-BE12-AB53AF52CD61"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7f52:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87543FB4-658A-4300-9DC9-836AC1D4BCFB"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7f72:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07B3C659-C31A-4F82-9587-9F8A943F637D"
},
{
"criteria": "cpe:2.3:h:amd:epyc_7h12:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89FAAD8C-6DD1-408D-849B-0CE707321B13"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3101:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "839C6991-D387-471D-9112-C79677D5A5AB"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3151:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3480338B-290F-4E9C-88F9-A4160853B9BD"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3201:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6943C2EC-1555-40B8-9533-BBB6572E9073"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3251:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44A54822-42B0-47B4-A080-416D5C8AC20C"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3255:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2F8DDDB3-E4B0-4354-955F-E2196E404970"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3351:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C3B6175-0366-473D-A82F-E3F1373C74F5"
},
{
"criteria": "cpe:2.3:h:amd:epyc_embedded_3451:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C38BB8F3-11AD-48C3-B751-AF93E3EA6138"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@amd.com"
}