CVE-2021-26318

—

CVSS 3.1

4.7 medium

EPSS

<1%p26

Published

Oct 13, 2021 (Oct 13, 2021)

Modified

Jun 17, 2026

Description

A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.

Vendors: amd
Products: athlon firmware, athlon pro firmware, epyc firmware, ryzen firmware, ryzen pro firmware
Weakness: CWE-208, CWE-203
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news2 stories

Academics find Meltdown-like attacks on AMD CPUs, previously thought to be unaffected

The RecordDec 16, 00:00 UTC · Dec 16, 2022Vulnerability CVE-2020-12965 CVE-2021-26318

Boffins devise a new side

Security AffairsOct 15, 13:50 UTC · Oct 15, 2021Vulnerability CVE-2021-26318