{"cve":"CVE-2021-26342","nvd":{"published":"2022-05-11T17:15:08.297","modified":"2026-06-17T03:43:11.003","status":"Modified","description":"In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":3.3},"cwes":[],"references":["https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028","https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1028"],"products":["amd:epyc_7001_firmware","amd:epyc_7251_firmware","amd:epyc_7261_firmware","amd:epyc_7281_firmware","amd:epyc_72f3_firmware","amd:epyc_7301_firmware","amd:epyc_7313_firmware","amd:epyc_7313p_firmware","amd:epyc_7343_firmware","amd:epyc_7351_firmware","amd:epyc_7351p_firmware","amd:epyc_7371_firmware","amd:epyc_7373x_firmware","amd:epyc_73f3_firmware","amd:epyc_7401_firmware","amd:epyc_7401p_firmware","amd:epyc_7413_firmware","amd:epyc_7443_firmware","amd:epyc_7443p_firmware","amd:epyc_7451_firmware","amd:epyc_7453_firmware","amd:epyc_7473x_firmware","amd:epyc_74f3_firmware","amd:epyc_7501_firmware","amd:epyc_7513_firmware","amd:epyc_7543_firmware","amd:epyc_7543p_firmware","amd:epyc_7551_firmware","amd:epyc_7551p_firmware","amd:epyc_7573x_firmware","amd:epyc_75f3_firmware","amd:epyc_7601_firmware","amd:epyc_7643_firmware","amd:epyc_7663_firmware","amd:epyc_7713_firmware","amd:epyc_7713p_firmware","amd:epyc_7763_firmware","amd:epyc_7773x_firmware"],"source":"nvd","synced_at":"2026-10-19T21:31:59.322382750+00:00"},"epss":{"cve":"CVE-2021-26342","score":0.00223,"percentile":0.13001,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}