Lucene search

AMDCVE-2021-26362

HistoryMay 12, 2022 - 6:16 p.m.

CVE-2021-26362

2022-05-1218:16:53

AMD

web.nvd.nist.gov

cve-2021-26362

malicious uapp

compromised abl

system call

smn registers

integrity

availability

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

12.6%

JSON

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.

Affected configurations

Nvd

Node

amdradeon_softwareMatch-

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdathlon_3050ge_firmwareMatch-

AND

amdathlon_3050geMatch-

Node

amdathlon_3150ge_firmwareMatch-

AND

amdathlon_3150geMatch-

Node

amdathlon_3150g_firmwareMatch-

AND

amdathlon_3150gMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700_firmwareMatch-

AND

amdryzen_7_2700Match-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

VendorProductVersionCPE
amdradeon_software-cpe:2.3:a:amd:radeon_software:-:*:*:*:*:*:*:*
amdryzen_3_2200u_firmware-cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2200u-cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*
amdryzen_3_2300u_firmware-cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2300u-cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:*
amdryzen_3_5125c_firmware-cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:*:*:*:*:*:*:*
amdryzen_3_5125c-cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:*
amdryzen_3_5400u_firmware-cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_5400u-cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:*
amdathlon_3050ge_firmware-cpe:2.3:o:amd:athlon_3050ge_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_software	-	cpe:2.3:a:amd:radeon_software:-:::::::*
amd	ryzen_3_2200u_firmware	-	cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:::::::*
amd	ryzen_3_2200u	-	cpe:2.3:h:amd:ryzen_3_2200u:-:::::::*
amd	ryzen_3_2300u_firmware	-	cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:::::::*
amd	ryzen_3_2300u	-	cpe:2.3:h:amd:ryzen_3_2300u:-:::::::*
amd	ryzen_3_5125c_firmware	-	cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:::::::*
amd	ryzen_3_5125c	-	cpe:2.3:h:amd:ryzen_3_5125c:-:::::::*
amd	ryzen_3_5400u_firmware	-	cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:::::::*
amd	ryzen_3_5400u	-	cpe:2.3:h:amd:ryzen_3_5400u:-:::::::*
amd	athlon_3050ge_firmware	-	cpe:2.3:o:amd:athlon_3050ge_firmware:-:::::::*

Rows per page:

1-10 of 711

CNA Affected

[
  {
    "product": "Ryzen™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": "Athlon™ Series",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-26362