CVE-2021-26334

🗓️ 01 Dec 2021 15:43:24Reported by AMDType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 132 Views

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel, leading to privilege escalation and ring-0 code execution

Reporter	Title	Published	Views	Family All 16
Amd	Potential Improper Access Control Vulnerability in AMD μProf Tool	9 Nov 202100:00	–	amd
BDU FSTEC	The vulnerability of AMD’s microprogrammed software for processors lies in the violation of data protection mechanisms, allowing attackers to circumvent the SPI ROM protection mechanism.	18 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the loader for AMD Platform Security Processor processors allows a hacker to execute arbitrary code.	18 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AMDPowerProfiler.sys driver, a tool for analyzing software profiling, is related to improper access control. This allows attackers to increase their privileges.	18 Dec 202400:00	–	bdu_fstec
Circl	CVE-2021-26334	12 Nov 202112:40	–	circl
CNNVD	AMD μProf 安全漏洞	1 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-26334 AMD Chipset Driver Information Disclosure Vulnerability	1 Dec 202115:43	–	cvelist
EUVD	EUVD-2021-13140	7 Oct 202500:30	–	euvd
NVD	CVE-2021-26334	1 Dec 202116:15	–	nvd
OSV	CVE-2021-26334	1 Dec 202116:15	–	osv

NVD

Node

amd amd_uprofRange<3.4.494

AND

microsoft windowsMatch-

Node

amd amd_uprofRange<3.4.502

AND

linux linux_kernelMatch-

[
  {
    "product": "μProf Tool",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "3.4.494",
        "status": "affected",
        "version": "μProf Tool",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
amd	www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016

21 Nov 2024 05:56Current

9.6High risk

Vulners AI Score9.6

CVSS 29

CVSS 3.19.9

EPSS0.00508

CWE-284