CVE-2021-26367
Medium
Description
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
SeverityMedium
CVSS5.7
Exploit probability—
ProductAmd Radeon Software
PublishedAug 13, 2024
First seenAug 13, 2024
How to fix
Update
- amd radeon_software23.12.1 or later
- amd ryzen_9_5980hx_firmwarecezannepi-fp6_1.0.0.6 or later
- amd ryzen_3_3300u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_3_3350u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3450u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3500u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3500c_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3550h_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_5_3580u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3700u_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3700c_firmwarepicassopi-fp5_1.0.0.e or later
- amd ryzen_7_3750h_firmwarepicassopi-fp5_1.0.0.e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd radeon_software | v < 23.12.1, v ≤ 23.q4 | 23.12.1 |
| amd ryzen_9_5980hx_firmware | v < cezannepi-fp6_1.0.0.6 | cezannepi-fp6_1.0.0.6 |
| amd ryzen_3_3300u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_3_3350u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3450u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3500u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3500c_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3550h_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_5_3580u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3700u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3700c_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3750h_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd ryzen_7_3780u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_gold_3150c_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_gold_3150u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_pro_3145b_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_silver_3050c_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_silver_3050u_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_pro_3045b_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_silver_3050e_firmware | v < picassopi-fp5_1.0.0.e | picassopi-fp5_1.0.0.e |
| amd athlon_gold_pro_3150g_firmware | v < comboam4pi_1.0.0.9 | comboam4pi_1.0.0.9 |
| amd athlon_gold_3150g_firmware | v < comboam4pi_1.0.0.9 | comboam4pi_1.0.0.9 |
| amd athlon_gold_pro_3150ge_firmware | v < comboam4pi_1.0.0.9 | comboam4pi_1.0.0.9 |
| amd athlon_pro_300ge_firmware | v < comboam4pi_1.0.0.9 | comboam4pi_1.0.0.9 |
| amd ryzen_3_4300ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_5_4600ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_7_4700ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_3_4300g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_5_4600g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_7_4700g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_3_5300ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_3_5300g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_5_5600ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_5_5600g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_7_5700ge_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
| amd ryzen_7_5700g_firmware | v < comboam4v2_pi_1.2.0.5 | comboam4v2_pi_1.2.0.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.