CVE-2021-26392

2022-11-0800:00:00

AMD

www.cve.org

verification

loadmodule

size check

out-of-bounds write

code execution

os/kernel

attacker

privileges

cve-2021-26392

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Insufficient verification of missing size check in ‘LoadModule’ may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AMD Radeon RX 5000 Series & PRO W5000 Series ",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "22.5.2",
        "status": "affected",
        "version": "AMD Radeon Software",
        "versionType": "custom"
      },
      {
        "lessThan": "22.Q2",
        "status": "affected",
        "version": "AMD Radeon Pro Software Enterprise",
        "versionType": "custom"
      },
      {
        "lessThan": "22.10.20",
        "status": "affected",
        "version": "Enterprise Driver",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Radeon RX 6000 Series & PRO W6000 Series ",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "22.5.2",
        "status": "affected",
        "version": "AMD Radeon Software",
        "versionType": "custom"
      },
      {
        "lessThan": "22.Q2",
        "status": "affected",
        "version": "AMD Radeon Pro Software Enterprise",
        "versionType": "custom"
      },
      {
        "lessThan": "22.10.20",
        "status": "affected",
        "version": "Enterprise Driver",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded R2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded 5000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded V1000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™ Embedded V2000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "AMD Ryzen™Embedded V3000",
    "vendor": "AMD",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]