CVE-2021-26406: AMD Epyc 7232p Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES user application can lead to a host crash potentially resulting in denial of service.

Affected products

• AMD Epyc 7232p Firmware: version romepi_1.0.0.a only
• AMD Epyc 7251 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7252 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7261 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7262 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7272 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7281 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7282 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7301 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7302 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7302p Firmware: version romepi_1.0.0.a only
• AMD Epyc 7351 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7351p Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7352 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7371 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7401 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7401p Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7402 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7402p Firmware: version romepi_1.0.0.a only
• AMD Epyc 7451 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7452 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7501 Firmware: version naplespi_1.0.0.e only
• AMD Epyc 7502 Firmware: version romepi_1.0.0.a only
• AMD Epyc 7502p Firmware: version romepi_1.0.0.a only
• AMD Epyc 7532 Firmware: version romepi_1.0.0.a only
• and 15 more

Published 2023-05-09. Last modified 2026-06-17.