Skip to content
Fencer Intel
medium 5.5

CVE-2021-26312 json

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory…

published 4y ago modified 4mo ago also EUVD-2021-13118

cvss
5.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 16%
public exploits
0
none known

Summary

Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.

Patch / fix

  • amd epyc_7601_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7551p_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7551_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7501_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7451_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7401_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7371_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7351p_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7351_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7301_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7281_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7261_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7251_firmware naplespi-sp3_1.0.0.g
  • amd epyc_7f72_firmware romepi-sp3_1.0.0.c
  • amd epyc_7f52_firmware romepi-sp3_1.0.0.c
  • amd epyc_7f32_firmware romepi-sp3_1.0.0.c
  • amd epyc_7h12_firmware romepi-sp3_1.0.0.c
  • amd epyc_7742_firmware romepi-sp3_1.0.0.c
  • amd epyc_7702_firmware romepi-sp3_1.0.0.c
  • amd epyc_7702p_firmware romepi-sp3_1.0.0.c
  • kernel-firmware SLE Module for Basesystem 15 SP4, openSUSE Leap 15.4 20220509-150400.4.5.1
  • kernel-firmware SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 20191118-150000.3.42.1
  • kernel-firmware SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +3 more 20190618-5.25.2
  • kernel-firmware SLE Module for Basesystem 15 SP3, SLE Micro 5.2, SLE Micro 5.1 +1 more 20210208-150300.4.10.1
  • kernel-firmware SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES 15 SP2-LTSS +12 more 20200107-150100.3.31.1

suse advisories SUSE-SU-2022:1923-1SUSE-SU-2022:1847-1SUSE-SU-2022:1846-1SUSE-SU-2022:1840-1SUSE-SU-2022:1751-1

Is CVE-2021-26312 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.25% chance of exploitation in the next 30 days, higher than 16% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • AMD EPYC™ Processors
  • AMD Ryzen™ Series
  • AMD Athlon™ Series

Classification

Weakness
  • CWE-665 Improper Initialization
  • CWE-668 Exposure of Resource to Wrong Sphere

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.