CVE-2021-26314
CVE-2021-26314 · AMD Speculative execution with Floating-Point Value Injection
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.
CVSS 5.5 · Medium · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
all supported processors
- Versions
- ≥ unspecified, < undefined: Affected (custom)
No fix published
xen Ubuntu:16.04:LTS
- Versions
- 4.5.1-0ubuntu1
- 4.5.1-0ubuntu2
- 4.6.0-1ubuntu1
- 4.6.0-1ubuntu2
- 4.6.0-1ubuntu4
- 4.6.0-1ubuntu4.1
- 4.6.0-1ubuntu4.2
- 4.6.0-1ubuntu4.3
- 4.6.5-0ubuntu1
- 4.6.5-0ubuntu1.1
- 4.6.5-0ubuntu1.2
- 4.6.5-0ubuntu1.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:18.04:LTS
- Versions
- 4.9.0-0ubuntu3
- 4.9.0-0ubuntu4
- 4.9.2-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:20.04:LTS
- Versions
- 4.9.2-0ubuntu2
- 4.9.2-0ubuntu6
- 4.9.2-0ubuntu7
- 4.11.3+24-g14b62ab3e5-1ubuntu1
- 4.11.3+24-g14b62ab3e5-1ubuntu2
- 4.11.3+24-g14b62ab3e5-1ubuntu2.2
- 4.11.3+24-g14b62ab3e5-1ubuntu2.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:22.04:LTS
- Versions
- 4.11.4+24-gddaaccbbab-1ubuntu2
- 4.16.0-1~ubuntu2
- 4.16.0-1~ubuntu2.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:24.04:LTS
- Versions
- 4.17.2-1
- 4.17.2+55-g0b56bed864-1
- 4.17.2+76-ge1f9cb16e2-1
- 4.17.2+76-ge1f9cb16e2-1ubuntu1
- 4.17.3+10-g091466ba55-1
- 4.17.3+10-g091466ba55-1.1ubuntu2
- 4.17.3+10-g091466ba55-1.1ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:25.10
- Versions
- 4.20.0-1ubuntu1
- 4.20.0+68-g35cb38b222-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:26.10
- Versions
- 4.20.2+7-g1badcf5035-2build2
- 4.20.2+37-g61ff35323e-1ubuntu1
- 4.20.3+127-gc42374a105-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xen Ubuntu:26.04:LTS
- Versions
- 4.20.0+68-g35cb38b222-1
- 4.20.2+7-g1badcf5035-2
- 4.20.2+7-g1badcf5035-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003
- http://www.openwall.com/lists/oss-security/2021/06/09/2
- http://www.openwall.com/lists/oss-security/2021/06/10/1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
- https://nvd.nist.gov/vuln/detail/CVE-2021-26314