CVE-2021-26313
Last modified
CVE-2021-26313 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Xen | Xen | All versions |
| Arm | Cortex-A72 | All versions |
| Broadcom | Bcm2711 | All versions |
| Intel | Core I7-10700k | All versions |
| Intel | Core I7-7700k | All versions |
| Intel | Core I9-9900k | All versions |
| Intel | Xeon Silver 4214 | All versions |
| Debian | Debian Linux | 10.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-26313?
How severe is CVE-2021-26313?
How do I fix CVE-2021-26313?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-26307An issue was discovered in the raw-cpuid crate before 9.0.0 …5.5
- CVE-2021-26308An issue was discovered in the marc crate before 2.0.0 for R…7.5
- CVE-2021-26309Information disclosure in the TeamCity plugin for IntelliJ b…3.3
- CVE-2021-26310In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS w…7.5
- CVE-2021-26311In the AMD SEV/SEV-ES feature, memory can be rearranged in t…7.2
- CVE-2021-26312Failure to flush the Translation Lookaside Buffer (TLB) of t…5.5
- CVE-2021-26314Potential floating point value injection in all supported CP…5.5
- CVE-2021-26315When the AMD Platform Security Processor (PSP) boot rom load…7.8
- CVE-2021-26316Failure to validate the communication buffer and communicati…7.8
- CVE-2021-26317Failure to verify the protocol in SMM may allow an attacker …7.8
- CVE-2021-26318A timing and power-based side channel attack leveraging the …4.7
- CVE-2021-26319Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2021-26313?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST