Lucene search

[email protected]CVE-2021-26368

HistoryMay 12, 2022 - 7:15 p.m.

CVE-2021-26368

2022-05-1219:15:48

CWE-345

[email protected]

web.nvd.nist.gov

cve-2021-26368

insufficient check

trusted os

privilege escalation

memory mapping

denial of service

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.

Affected configurations

NVD

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_3100Match-

AND

amdryzen_3_3100_firmwareMatch-

Node

amdryzen_3_3300g_firmwareMatch-

AND

amdryzen_3_3300gMatch-

Node

amdryzen_3_3300x_firmwareMatch-

AND

amdryzen_3_3300xMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5300g_firmwareMatch-

AND

amdryzen_5300gMatch-

Node

amdryzen_5300ge_firmwareMatch-

AND

amdryzen_5300geMatch-

Node

amdryzen_5600g_firmwareMatch-

AND

amdryzen_5600gMatch-

Node

amdryzen_5600ge_firmwareMatch-

AND

amdryzen_5600geMatch-

Node

amdryzen_5600x_firmwareMatch-

AND

amdryzen_5600xMatch-

Node

amdryzen_5700g_firmwareMatch-

AND

amdryzen_5700gMatch-

Node

amdryzen_5700ge_firmwareMatch-

AND

amdryzen_5700geMatch-

Node

amdryzen_5800x_firmwareMatch-

AND

amdryzen_5800xMatch-

Node

amdryzen_5800x3d_firmwareMatch-

AND

amdryzen_5800x3dMatch-

Node

amdryzen_5900x_firmwareMatch-

AND

amdryzen_5900xMatch-

Node

amdryzen_5950x_firmwareMatch-

AND

amdryzen_5950xMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_3400g_firmwareMatch-

AND

amdryzen_5_3400gMatch-

Node

amdryzen_5_3450g_firmwareMatch-

AND

amdryzen_5_3450gMatch-

Node

amdryzen_5_3600Match-

AND

amdryzen_5_3600_firmwareMatch-

Node

amdryzen_5_3600xMatch-

AND

amdryzen_5_3600x_firmwareMatch-

Node

amdryzen_5_5560uMatch-

AND

amdryzen_5_5560u_firmwareMatch-

Node

amdryzen_5_5600hMatch-

AND

amdryzen_5_5600h_firmwareMatch-

Node

amdryzen_5_5600hsMatch-

AND

amdryzen_5_5600hs_firmwareMatch-

Node

amdryzen_5_5600uMatch-

AND

amdryzen_5_5600u_firmwareMatch-

Node

amdryzen_5_5600xMatch-

AND

amdryzen_5_5600x_firmwareMatch-

Node

amdryzen_5_5625cMatch-

AND

amdryzen_5_5625c_firmwareMatch-

Node

amdryzen_5_5625uMatch-

AND

amdryzen_5_5625u_firmwareMatch-

Node

amdryzen_5_5700gMatch-

AND

amdryzen_5_5700g_firmwareMatch-

Node

amdryzen_5_5700geMatch-

AND

amdryzen_5_5700ge_firmwareMatch-

Node

amdryzen_7_2700Match-

AND

amdryzen_7_2700_firmwareMatch-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_3700x_firmwareMatch-

AND

amdryzen_7_3700xMatch-

Node

amdryzen_7_3800x_firmwareMatch-

AND

amdryzen_7_3800xMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_3900x_firmwareMatch-

AND

amdryzen_9_3900xMatch-

Node

amdryzen_9_3950x_firmwareMatch-

AND

amdryzen_9_3950xMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_threadripper_2920x_firmwareMatch-

AND

amdryzen_threadripper_2920xMatch-

Node

amdryzen_threadripper_2950x_firmwareMatch-

AND

amdryzen_threadripper_2950xMatch-

Node

amdryzen_threadripper_2970wx_firmwareMatch-

AND

amdryzen_threadripper_2970wxMatch-

Node

amdryzen_threadripper_2990wx_firmwareMatch-

AND

amdryzen_threadripper_2990wxMatch-

Node

amdryzen_threadripper_3960x_firmwareMatch-

AND

amdryzen_threadripper_3960xMatch-

Node

amdryzen_threadripper_3970x_firmwareMatch-

AND

amdryzen_threadripper_3970xMatch-

Node

amdryzen_threadripper_3990x_firmwareMatch-

AND

amdryzen_threadripper_3990xMatch-

Node

amdryzen_threadripper_pro_3945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3945wxMatch-

Node

amdryzen_threadripper_pro_3955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3955wxMatch-

Node

amdryzen_threadripper_pro_3975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3975wxMatch-

Node

amdryzen_threadripper_pro_3995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_3995wxMatch-

Node

amdryzen_threadripper_pro_5945wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5945wxMatch-

Node

amdryzen_threadripper_pro_5955wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5955wxMatch-

Node

amdryzen_threadripper_pro_5965wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5965wxMatch-

Node

amdryzen_threadripper_pro_5975wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5975wxMatch-

Node

amdryzen_threadripper_pro_5995wx_firmwareMatch-

AND

amdryzen_threadripper_pro_5995wxMatch-

CPENameOperatorVersion
amd:ryzen_3_2200u_firmwareamd ryzen 3 2200u firmwareeq-

CPE	Name	Operator	Version
amd:ryzen_3_2200u_firmware	amd ryzen 3 2200u firmware	eq	-

CNA Affected

[
  {
    "product": "Ryzen™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "product": " Athlon™ Series ",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Social References

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-26368

prion1 nvd1 cvelist1 hp1 amd1