CVE-2021-26318

{"id": "CVE-2021-26318", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.0}]}, "published": "2021-10-13T19:15:07.360", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1017", "tags": ["Vendor Advisory"], "source": "psirt@amd.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-203"}]}, {"type": "Secondary", "source": "psirt@amd.com", "description": [{"lang": "en", "value": "CWE-208"}]}], "descriptions": [{"lang": "en", "value": "A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information."}, {"lang": "es", "value": "Un ataque de canal lateral basado en el tiempo y la energ\u00eda aprovechando las instrucciones x86 PREFETCH en algunas CPUs de AMD podr\u00eda potencialmente resultar en una filtraci\u00f3n de informaci\u00f3n del espacio de direcciones del kernel"}], "lastModified": "2021-10-20T18:29:12.263", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:athlon_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED9F64FB-2B5D-4B9B-9ABD-23324005CB38"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:athlon:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2C0A97A7-4790-4234-9617-B88A96C2C2F7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:athlon_pro_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CDE494B-7C70-4359-856B-793AF93FECE1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:athlon_pro:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "464AD06F-B6C1-4F2C-B649-DFA1AE387DD8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:epyc_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33B3CD35-6644-42BD-84C8-D7584178C50E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:epyc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CF7F2DBC-56AD-4D96-AFB3-5F97FACABDC1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:ryzen_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAEA5209-C0F6-4645-A541-A68CBC70695B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:ryzen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "047F0F4D-DCE1-4E3F-A888-39E894DF857D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:amd:ryzen_pro_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08E59D0B-FB2F-4C17-B9BC-462DFB366777"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:amd:ryzen_pro:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA9541F0-5B33-4F09-B201-E887DA572571"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@amd.com"}