CVE-2021-26381: AMD Ryzen™ Threadripper™ PRO 3000 WX-Series

Описание

Оригинално описание

Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.

Засегнати продукти

• AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors: ChagallWSPI-sWRX8 1.0.0.2/ CastlePeakWSPI-sWRX8 1.0.0.9
• AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: ComboAM4v2 PI 1.2.0.5
• AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors: ChagallWSPI-sWRX8 1.0.0.1
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: PicassoPI-FP5 1.0.0.E
• AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6 1.0.0.8
• AMD AMD Ryzen™ 3000 Series Desktop Processors: ComboAM4PI 1.0.0.9/ ComboAM4 V2 PI 1.2.0.8
• AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: RenoirPI-FP6 1.0.0.8
• AMD AMD Ryzen™ 4000 Series Desktop Processors: ComboAM4v2 PI 1.2.0.5
• AMD AMD Ryzen™ 5000 Series Desktop Processors: ComboAM4 V2 PI 1.2.0.8
• AMD AMD Ryzen™ Embedded R1000 Series Processors: EmbeddedPI-FP5 1.2.0.A
• AMD AMD Ryzen™ Embedded R2000 Series Processors: EmbeddedR2KPI-FP5_1.0.0.2
• AMD AMD Ryzen™ Embedded 5000 Series Processors: EmbAM4PI 1.0.0.2
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"): EmbeddedPI-FP5 1.2.0.A
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"): 120A
• AMD AMD Ryzen™ Embedded V2000 Series Processors: EmbeddedPI-FP6_1.0.0.6
• AMD AMD Ryzen™ Embedded V3000 Series Processors: EmbeddedPI-FP7r2_0080
• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.4.1 (24.30.31.08), AMD Software: PRO Edition 25.Q2(25.10.10)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.4.1 (24.30.31.08), AMD Software: PRO Edition 25.Q2(25.10.10)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.4.1 (24.30.31.08), AMD Software: PRO Edition 25.Q2(25.10.10)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.4.1 (24.30.31.08), AMD Software: PRO Edition 25.Q2(25.10.10)
• AMD AMD Radeon™ PRO V520: Contact Your AMD Customer Engineering Represenatative
• AMD AMD Radeon™ PRO V620: Contact Your AMD Customer Engineering Represenatative

Вид слабост

• CWE-770 Allocation of Resources Without Limits or Throttling

История

Други уязвимости в AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

• 6.9CVE-2026-43603
• 7.4CVE-2023-20577
• 7.7CVE-2023-20576
• 5.6CVE-2023-20572
• 1.8CVE-2023-20540

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-26381
• https://nvd.nist.gov/vuln/detail/CVE-2021-26381
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html