CVE-2021-26382
Medium
Description
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
SeverityMedium
CVSS4.4
Exploit probability—
ProductAmd Ryzen 7 5700g Firmware
PublishedJul 14, 2022
First seenJul 14, 2022
How to fix
Update
- amd ryzen_7_5700g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_7_5700ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_5_5600ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300g_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_3_5300ge_firmwarecomboam4_v2_pi_1.2.0.6c or later
- amd ryzen_9_5980hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5980hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825u_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hx_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_9_5900hs_firmwarecezannepi-fp6_1.0.0.9 or later
- amd ryzen_7_5825c_firmwarecezannepi-fp6_1.0.0.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd ryzen_7_5700g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_7_5700ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_5_5600ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300g_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_3_5300ge_firmware | v < comboam4_v2_pi_1.2.0.6c | comboam4_v2_pi_1.2.0.6c |
| amd ryzen_9_5980hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5980hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hx_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_9_5900hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5825c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5625c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600h_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600hs_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_7_5800u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5600u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_5_5560u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5425c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5400u_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_5125c_firmware | v < cezannepi-fp6_1.0.0.9 | cezannepi-fp6_1.0.0.9 |
| amd ryzen_3_3200u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_3_3250u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_3_3300u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_5_3500u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_5_3550h_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_5_3580u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_7_3700u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_7_pro_3700u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_7_3750h_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
| amd ryzen_7_3780u_firmware | v < renoirpi-fp6_1.0.0.7 | renoirpi-fp6_1.0.0.7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.