CVE-2021-26393
Medium
Description
Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of the process memory with attacker controlled data resulting in a loss of confidentiality.
SeverityMedium
CVSS5.5
Exploit probability—
ProductAmd Enterprise Driver
PublishedNov 9, 2022
First seenNov 9, 2022
How to fix
Update
- amd enterprise_driver22.10.20 or later
- amd radeon_pro_software22.q2 or later
- amd radeon_software22.5.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amd enterprise_driver | v < 22.10.20 | 22.10.20 |
| amd radeon_pro_software | v < 22.q2 | 22.q2 |
| amd radeon_software | v < 22.5.2 | 22.5.2 |
| amd radeon_rx_vega_56_firmware | No range specified | — |
| amd radeon_rx_vega_64_firmware | No range specified | — |
| amd ryzen_3_2200ge_firmware | No range specified | — |
| amd ryzen_3_2200g_firmware | No range specified | — |
| amd ryzen_5_2400ge_firmware | No range specified | — |
| amd ryzen_5_2400g_firmware | No range specified | — |
| amd ryzen_3_5300ge_firmware | No range specified | — |
| amd ryzen_3_5300g_firmware | No range specified | — |
| amd ryzen_5_5600ge_firmware | No range specified | — |
| amd ryzen_5_5600g_firmware | No range specified | — |
| amd ryzen_7_5700ge_firmware | No range specified | — |
| amd ryzen_7_5700g_firmware | No range specified | — |
| amd athlon_silver_3050e_firmware | No range specified | — |
| amd athlon_pro_3045b_firmware | No range specified | — |
| amd athlon_silver_3050u_firmware | No range specified | — |
| amd athlon_silver_3050c_firmware | No range specified | — |
| amd athlon_pro_3145b_firmware | No range specified | — |
| amd athlon_gold_3150u_firmware | No range specified | — |
| amd athlon_gold_3150c_firmware | No range specified | — |
| amd ryzen_3_3250u_firmware | No range specified | — |
| amd ryzen_3_3250c_firmware | No range specified | — |
| amd amd_3020e_firmware | No range specified | — |
| amd amd_3015e_firmware | No range specified | — |
| amd amd_3015ce_firmware | No range specified | — |
| amd ryzen_3_2200u_firmware | No range specified | — |
| amd ryzen_3_2300u_firmware | No range specified | — |
| amd ryzen_5_2500u_firmware | No range specified | — |
| amd ryzen_5_2600h_firmware | No range specified | — |
| amd ryzen_7_2700u_firmware | No range specified | — |
| amd ryzen_7_2800h_firmware | No range specified | — |
| amd ryzen_3_3300u_firmware | No range specified | — |
| amd ryzen_3_3350u_firmware | No range specified | — |
| amd ryzen_5_3450u_firmware | No range specified | — |
| amd ryzen_5_3500u_firmware | No range specified | — |
| amd ryzen_5_3500c_firmware | No range specified | — |
| amd ryzen_5_3550h_firmware | No range specified | — |
| amd ryzen_5_3580u_firmware | No range specified | — |
| amd ryzen_7_3700u_firmware | No range specified | — |
| amd ryzen_7_3700c_firmware | No range specified | — |
| amd ryzen_7_3750h_firmware | No range specified | — |
| amd ryzen_7_3780u_firmware | No range specified | — |
| amd ryzen_3_pro_3200ge_firmware | No range specified | — |
| amd ryzen_3_3200g_firmware | No range specified | — |
| amd ryzen_3_pro_3200g_firmware | No range specified | — |
| amd ryzen_5_pro_3350ge_firmware | No range specified | — |
| amd ryzen_5_pro_3350g_firmware | No range specified | — |
| amd ryzen_5_pro_3400ge_firmware | No range specified | — |
| amd ryzen_5_pro_3400g_firmware | No range specified | — |
| amd ryzen_5_3400g_firmware | No range specified | — |
| amd ryzen_3_5300u_firmware | No range specified | — |
| amd ryzen_5_5500u_firmware | No range specified | — |
| amd ryzen_7_5700u_firmware | No range specified | — |
| amd ryzen_3_5400u_firmware | No range specified | — |
| amd ryzen_5_5560u_firmware | No range specified | — |
| amd ryzen_5_5600u_firmware | No range specified | — |
| amd ryzen_5_5600h_firmware | No range specified | — |
| amd ryzen_5_5600hs_firmware | No range specified | — |
| amd ryzen_7_5800u_firmware | No range specified | — |
| amd ryzen_7_5800h_firmware | No range specified | — |
| amd ryzen_7_5800hs_firmware | No range specified | — |
| amd ryzen_9_5900hs_firmware | No range specified | — |
| amd ryzen_9_5900hx_firmware | No range specified | — |
| amd ryzen_9_5980hs_firmware | No range specified | — |
| amd ryzen_9_5980hx_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.