CVE-2021-26410
AMD AMD Ryzenâ„¢ 5000 Series Desktop Processors with Radeonâ„¢ Graphics
LOW 1.8
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 6 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- AMD
- Statut NVD
- Deferred
Description
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.
Faiblesses (CWE)
- CWE-822 — Untrusted Pointer Dereference
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 4.0 | LOW 1.8 | CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N | AMD |
| CVSS 4.0 | LOW 1.8 | CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · psirt@amd.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2021-13216
- GCVE · GCVE-0-2021-26410
Produits affectés
| Produit | Versions |
|---|---|
| AMD · AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | unaffected ComboAM4v2 PI 1.2.0.5+ iGPU Driver Update |
| AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | unaffected RenoirPI-FP6 1.0.0.8 |
| AMD · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.8 |
| AMD · AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.8 |
| AMD · AMD Ryzen™ 4000 Series Desktop Processors | unaffected ComboAM4v2 PI 1.2.0.5 |
| AMD · AMD Ryzen™ Embedded R1000 Series Processors | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD · AMD Ryzen™ Embedded R2000 Series Processors | unaffected EmbeddedR2KPI-FP5_1.0.0.2 |
| AMD · AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD · AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD · AMD Ryzen™ Embedded V2000 Series Processors | unaffected EmbeddedPI-FP6_1.0.0.6 |
| AMD · AMD Ryzen™ Embedded V3000 Series Processors | unaffected EmbeddedPI-FP7r2_1.0.0.0 |
| AMD · AMD Radeon™ RX 5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD · AMD Radeon™ PRO W5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD · AMD Radeon™ RX 6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD · AMD Radeon™ PRO W6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD · AMD Radeon™ PRO V520 | unaffected Contact your AMD Customer Engineering representative |
| AMD · AMD Radeon™ PRO V620 | unaffected Contact your AMD Customer Engineering representative |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |