CVE-2021-26363

Medium

Description

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure.

SeverityMedium
CVSS4.4
Exploit probability12. percentile0.2%
ProductAmd Radeon Software
PublishedMay 12, 2022
First seenMay 12, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
amd radeon_softwareNo range specified—
amd ryzen_3_3100_firmwareNo range specified—
amd ryzen_3_3300g_firmwareNo range specified—
amd ryzen_3_3300x_firmwareNo range specified—
amd ryzen_3_5400u_firmwareNo range specified—
amd ryzen_9_5900hs_firmwareNo range specified—
amd ryzen_9_5900hx_firmwareNo range specified—
amd ryzen_9_5980hs_firmwareNo range specified—
amd ryzen_9_5980hx_firmwareNo range specified—
amd ryzen_3_5125c_firmwareNo range specified—
amd ryzen_3_5425c_firmwareNo range specified—
amd ryzen_7_3700x_firmwareNo range specified—
amd ryzen_9_3900x_firmwareNo range specified—
amd ryzen_9_3950x_firmwareNo range specified—
amd ryzen_7_3800x_firmwareNo range specified—
amd ryzen_3_5425u_firmwareNo range specified—
amd ryzen_5_3400g_firmwareNo range specified—
amd ryzen_7_5800h_firmwareNo range specified—
amd ryzen_7_5800hs_firmwareNo range specified—
amd ryzen_7_5800u_firmwareNo range specified—
amd ryzen_7_5825c_firmwareNo range specified—
amd ryzen_7_5825u_firmwareNo range specified—
amd ryzen_5_3450g_firmwareNo range specified—
amd ryzen_5_3600_firmwareNo range specified—
amd ryzen_5_3600x_firmwareNo range specified—
amd ryzen_5_5560u_firmwareNo range specified—
amd ryzen_5_5600h_firmwareNo range specified—
amd ryzen_5_5600u_firmwareNo range specified—
amd ryzen_5_5600hs_firmwareNo range specified—
amd ryzen_5_5600x_firmwareNo range specified—
amd ryzen_5_5625c_firmwareNo range specified—
amd ryzen_5_5625u_firmwareNo range specified—
amd ryzen_5_5700g_firmwareNo range specified—
amd ryzen_5_5700ge_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-26363 · Amd Radeon Software · Dark Radar