Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

AMD AMD Ryzenâ„¢ 5000 Series Desktop Processors with Radeonâ„¢ Graphics

CVE-2021-26410
LOW 1.8

At a glance

Source
NVD
EPSS
EPSS 0.16 % · percentile 6 ()
State
PUBLISHED
Published
Updated
Assigner
AMD
NVD status
Deferred

Search on…

Description

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.

Weaknesses (CWE)

  • CWE-822 — Untrusted Pointer Dereference

References

Scores

VersionScoreVectorScored by
CVSS 4.0LOW 1.8CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:NAMD
CVSS 4.0LOW 1.8CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · psirt@amd.com (Secondary)

European references

Affected products

ProductVersions
AMD · AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphicsunaffected ComboAM4v2 PI 1.2.0.5+ iGPU Driver Update
AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphicsunaffected RenoirPI-FP6 1.0.0.8
AMD · AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphicsunaffected CezannePI-FP6 1.0.0.8
AMD · AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphicsunaffected CezannePI-FP6 1.0.0.8
AMD · AMD Ryzen™ 4000 Series Desktop Processorsunaffected ComboAM4v2 PI 1.2.0.5
AMD · AMD Ryzen™ Embedded R1000 Series Processorsunaffected EmbeddedPI-FP5_1.2.0.A
AMD · AMD Ryzen™ Embedded R2000 Series Processorsunaffected EmbeddedR2KPI-FP5_1.0.0.2
AMD · AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")unaffected EmbeddedPI-FP5_1.2.0.A
AMD · AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")unaffected EmbeddedPI-FP5_1.2.0.A
AMD · AMD Ryzen™ Embedded V2000 Series Processorsunaffected EmbeddedPI-FP6_1.0.0.6
AMD · AMD Ryzen™ Embedded V3000 Series Processorsunaffected EmbeddedPI-FP7r2_1.0.0.0
AMD · AMD Radeon™ RX 5000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
AMD · AMD Radeon™ PRO W5000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
AMD · AMD Radeon™ RX 6000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
AMD · AMD Radeon™ PRO W6000 Series Graphics Productsunaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
AMD · AMD Radeon™ PRO V520unaffected Contact your AMD Customer Engineering representative
AMD · AMD Radeon™ PRO V620unaffected Contact your AMD Customer Engineering representative

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD