CVE-2021-26314
AMD Speculative execution with Floating-Point Value Injection
- State
- Published
- Severity
- Not scored
- Published
- Jun 9, 2021
- Updated
- Sep 17, 2024
- Reserved
- Jan 29, 2021
Description
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.
Scores
The record has no CVSS score.
Weaknesses
- CWE-208 Information Exposure Through Timing Discrepancy
Affected Products
| Product | Versions |
|---|---|
All supported processorsAMD |
|
References
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003
- [oss-security] 20210609 Xen Security Advisory 375 v3 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypassmailing-list
- [oss-security] 20210610 Xen Security Advisory 375 v4 (CVE-2021-0089,CVE-2021-26313) - Speculative Code Store Bypassmailing-list
- FEDORA-2021-41d4347447vendor-advisory
- FEDORA-2021-993693c914vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.