CVE-2021-26390

Medium

Description

A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.

SeverityMedium
CVSS6.2
Exploit probability—
ProductAmd Ryzen 5 2600 Firmware
PublishedMay 10, 2022
First seenMay 10, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
amd ryzen_5_2600_firmwareNo range specified—
amd ryzen_5_2600x_firmwareNo range specified—
amd ryzen_5_2700x_firmwareNo range specified—
amd ryzen_5_2700_firmwareNo range specified—
amd ryzen_5_3600_firmwareNo range specified—
amd ryzen_5_3600x_firmwareNo range specified—
amd ryzen_7_3700x_firmwareNo range specified—
amd ryzen_7_3800x_firmwareNo range specified—
amd ryzen_9_3900x_firmwareNo range specified—
amd ryzen_9_3950x_firmwareNo range specified—
amd ryzen_9_5950x_firmwareNo range specified—
amd ryzen_9_5900x_firmwareNo range specified—
amd ryzen_7_5800x_firmwareNo range specified—
amd ryzen_7_5700g_firmwareNo range specified—
amd ryzen_7_5700ge_firmwareNo range specified—
amd ryzen_5_5600g_firmwareNo range specified—
amd ryzen_5_5600x_firmwareNo range specified—
amd ryzen_5_5600ge_firmwareNo range specified—
amd ryzen_3_5300g_firmwareNo range specified—
amd ryzen_3_5300ge_firmwareNo range specified—
amd ryzen_threadripper_2990wx_firmwareNo range specified—
amd ryzen_threadripper_2970wx_firmwareNo range specified—
amd ryzen_threadripper_2950x_firmwareNo range specified—
amd ryzen_threadripper_2920x_firmwareNo range specified—
amd ryzen_threadripper_3970x_firmwareNo range specified—
amd ryzen_threadripper_pro_5995wx_firmwareNo range specified—
amd ryzen_threadripper_pro_5975wx_firmwareNo range specified—
amd ryzen_threadripper_pro_5965wx_firmwareNo range specified—
amd ryzen_threadripper_pro_5955wx_firmwareNo range specified—
amd ryzen_threadripper_pro_5945wx_firmwareNo range specified—
amd ryzen_7_3750h_firmwareNo range specified—
amd ryzen_7_3700u_firmwareNo range specified—
amd ryzen_5_3550h_firmwareNo range specified—
amd ryzen_5_3500u_firmwareNo range specified—
amd ryzen_3_3300u_firmwareNo range specified—
amd ryzen_3_3200u_firmwareNo range specified—
amd athlon_300u_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.