CVE-2021-26380: AMD Ryzen™ 5000 Series Desktop Processors with Radeon™

Описание

Оригинално описание

A compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity.

Засегнати продукти

• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: ComboAM4v2 PI 1.2.0.5
• AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors: ChagallWSPI-sWRX8 1.0.0.2
• AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6 1.0.0.6
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: PicassoPI-FP5 1.0.0.E
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6 1.0.0.6
• AMD AMD Ryzen™ 3000 Series Desktop Processors: ComboAM4PI 1.0.0.9/ ComboAM4 V2 PI 1.2.0.8
• AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics: ComboAM4v2 PI 1.2.0.8
• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: RenoirPI-FP6 1.0.0.7
• AMD AMD Ryzen™ 4000 Series Desktop Processors: ComboAM4v2 PI 1.2.0.5
• AMD AMD Ryzen™ 5000 Series Desktop Processors: ComboAM4 V2 PI 1.2.0.8
• AMD AMD Ryzen™ Embedded R1000 Series Processors: EmbeddedPI-FP5_1.2.0.A
• AMD AMD Ryzen™ Embedded R2000 Series Processors: EmbeddedR2KPI-FP5_1.0.0.2
• AMD AMD Ryzen™ Embedded 5000 Series Processors: EmbAM4PI 1.0.0.2
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"): EmbeddedPI-FP5_1.2.0.A
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"): 120A
• AMD AMD Ryzen™ Embedded V2000 Series Processors: EmbeddedPI-FP6_1.0.0.6
• AMD AMD Ryzen™ Embedded V3000 Series Processors: EmbeddedPI-FP7r2_0080
• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.10.2 (25.10.33.02 RDNA1/RDNA2)
• AMD AMD Radeon™ RX Vega Series Graphics Cards: AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 25.8.1 (23.19.23.11 pre-RDNA)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: PRO Edition 25.Q3.1 (25.10.32 RDNA)
• AMD AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards: AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)
• AMD AMD Radeon™ PRO VII: AMD Software: PRO Edition 25.Q3 (23.19.23.11 pre-RDNA)
• AMD AMD Radeon™ Instinct™ MI25: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V520: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-190 Целочислено препълване отгоре

История

Други уязвимости в AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

• 6.9CVE-2026-43603
• 7.4CVE-2023-20577
• 7.7CVE-2023-20576
• 5.6CVE-2023-20572
• 1.8CVE-2023-20540

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-26380
• https://nvd.nist.gov/vuln/detail/CVE-2021-26380
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html