CVE-2021-26314

5.5 mediumEPSS 0.6%

Medium (5.5). EPSS 0.6% chance of exploitation in the next 30 days.

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWEs: CWE-203, CWE-208
Published: 2021-06-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

arm:cortex-a72
broadcom:bcm2711
fedoraproject:fedora
intel:core_i7-10700k
intel:core_i7-7700k
intel:core_i9-9900k
intel:xeon_silver_4214
xen:xen

References

http://www.openwall.com/lists/oss-security/2021/06/09/2
http://www.openwall.com/lists/oss-security/2021/06/10/1
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003

Check your stack JSON