CVE-2021-26333
Medium
Description
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Chipset Driver
PublishedSep 21, 2021
First seenSep 21, 2021
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- amd chipset_driver3.08.17.735 or later
- amd psp_driver5.17.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd chipset_driver | v < 3.08.17.735 | 3.08.17.735 |
| amd psp_driver | v < 5.17.0.0 | 5.17.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.