Lucene search

[email protected]NVD:CVE-2021-26362

HistoryMay 12, 2022 - 6:16 p.m.

CVE-2021-26362

2022-05-1218:16:53

[email protected]

web.nvd.nist.gov

malicious software

system call

integrity loss

abl

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

12.6%

JSON

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive System Management Network (SMN) registers leading to a loss of integrity and availability.

Affected configurations

Nvd

Node

amdradeon_softwareMatch-

Node

amdryzen_3_2200u_firmwareMatch-

AND

amdryzen_3_2200uMatch-

Node

amdryzen_3_2300u_firmwareMatch-

AND

amdryzen_3_2300uMatch-

Node

amdryzen_3_5125c_firmwareMatch-

AND

amdryzen_3_5125cMatch-

Node

amdryzen_3_5400u_firmwareMatch-

AND

amdryzen_3_5400uMatch-

Node

amdathlon_3050ge_firmwareMatch-

AND

amdathlon_3050geMatch-

Node

amdathlon_3150ge_firmwareMatch-

AND

amdathlon_3150geMatch-

Node

amdathlon_3150g_firmwareMatch-

AND

amdathlon_3150gMatch-

Node

amdryzen_3_5425c_firmwareMatch-

AND

amdryzen_3_5425cMatch-

Node

amdryzen_3_5425u_firmwareMatch-

AND

amdryzen_3_5425uMatch-

Node

amdryzen_5_2500u_firmwareMatch-

AND

amdryzen_5_2500uMatch-

Node

amdryzen_5_2600_firmwareMatch-

AND

amdryzen_5_2600Match-

Node

amdryzen_5_2600h_firmwareMatch-

AND

amdryzen_5_2600hMatch-

Node

amdryzen_5_2600x_firmwareMatch-

AND

amdryzen_5_2600xMatch-

Node

amdryzen_5_5560u_firmwareMatch-

AND

amdryzen_5_5560uMatch-

Node

amdryzen_5_5600h_firmwareMatch-

AND

amdryzen_5_5600hMatch-

Node

amdryzen_5_5600hs_firmwareMatch-

AND

amdryzen_5_5600hsMatch-

Node

amdryzen_5_5600u_firmwareMatch-

AND

amdryzen_5_5600uMatch-

Node

amdryzen_5_5600x_firmwareMatch-

AND

amdryzen_5_5600xMatch-

Node

amdryzen_5_5625c_firmwareMatch-

AND

amdryzen_5_5625cMatch-

Node

amdryzen_5_5625u_firmwareMatch-

AND

amdryzen_5_5625uMatch-

Node

amdryzen_5_5700g_firmwareMatch-

AND

amdryzen_5_5700gMatch-

Node

amdryzen_5_5700ge_firmwareMatch-

AND

amdryzen_5_5700geMatch-

Node

amdryzen_7_2700u_firmwareMatch-

AND

amdryzen_7_2700uMatch-

Node

amdryzen_7_2700_firmwareMatch-

AND

amdryzen_7_2700Match-

Node

amdryzen_7_2700x_firmwareMatch-

AND

amdryzen_7_2700xMatch-

Node

amdryzen_7_2800h_firmwareMatch-

AND

amdryzen_7_2800hMatch-

Node

amdryzen_7_5800h_firmwareMatch-

AND

amdryzen_7_5800hMatch-

Node

amdryzen_7_5800hs_firmwareMatch-

AND

amdryzen_7_5800hsMatch-

Node

amdryzen_7_5800u_firmwareMatch-

AND

amdryzen_7_5800uMatch-

Node

amdryzen_7_5825c_firmwareMatch-

AND

amdryzen_7_5825cMatch-

Node

amdryzen_7_5825u_firmwareMatch-

AND

amdryzen_7_5825uMatch-

Node

amdryzen_9_5980hx_firmwareMatch-

AND

amdryzen_9_5980hxMatch-

Node

amdryzen_9_5980hs_firmwareMatch-

AND

amdryzen_9_5980hsMatch-

Node

amdryzen_9_5900hx_firmwareMatch-

AND

amdryzen_9_5900hxMatch-

Node

amdryzen_9_5900hs_firmwareMatch-

AND

amdryzen_9_5900hsMatch-

VendorProductVersionCPE
amdradeon_software-cpe:2.3:a:amd:radeon_software:-:*:*:*:*:*:*:*
amdryzen_3_2200u_firmware-cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2200u-cpe:2.3:h:amd:ryzen_3_2200u:-:*:*:*:*:*:*:*
amdryzen_3_2300u_firmware-cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_2300u-cpe:2.3:h:amd:ryzen_3_2300u:-:*:*:*:*:*:*:*
amdryzen_3_5125c_firmware-cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:*:*:*:*:*:*:*
amdryzen_3_5125c-cpe:2.3:h:amd:ryzen_3_5125c:-:*:*:*:*:*:*:*
amdryzen_3_5400u_firmware-cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:*:*:*:*:*:*:*
amdryzen_3_5400u-cpe:2.3:h:amd:ryzen_3_5400u:-:*:*:*:*:*:*:*
amdathlon_3050ge_firmware-cpe:2.3:o:amd:athlon_3050ge_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
amd	radeon_software	-	cpe:2.3:a:amd:radeon_software:-:::::::*
amd	ryzen_3_2200u_firmware	-	cpe:2.3:o:amd:ryzen_3_2200u_firmware:-:::::::*
amd	ryzen_3_2200u	-	cpe:2.3:h:amd:ryzen_3_2200u:-:::::::*
amd	ryzen_3_2300u_firmware	-	cpe:2.3:o:amd:ryzen_3_2300u_firmware:-:::::::*
amd	ryzen_3_2300u	-	cpe:2.3:h:amd:ryzen_3_2300u:-:::::::*
amd	ryzen_3_5125c_firmware	-	cpe:2.3:o:amd:ryzen_3_5125c_firmware:-:::::::*
amd	ryzen_3_5125c	-	cpe:2.3:h:amd:ryzen_3_5125c:-:::::::*
amd	ryzen_3_5400u_firmware	-	cpe:2.3:o:amd:ryzen_3_5400u_firmware:-:::::::*
amd	ryzen_3_5400u	-	cpe:2.3:h:amd:ryzen_3_5400u:-:::::::*
amd	athlon_3050ge_firmware	-	cpe:2.3:o:amd:athlon_3050ge_firmware:-:::::::*

Rows per page:

1-10 of 711

References

www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2021-26362

cvelist1 prion1 cve1 hp1 amd1