CVEvulnerability

CVE-2021-26391

7.8 HIGH Published 2022-11-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-347

Description

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Affected configurations

• amd enterprise driver (< 22.10.20) • amd radeon pro software (< 22.q2) • amd radeon software (< 22.5.2) • amd radeon rx vega 56 firmware • amd radeon rx vega 64 firmware • amd ryzen 3 5300ge firmware • amd ryzen 3 5300g firmware • amd ryzen 5 5600ge firmware • amd ryzen 5 5600g firmware • amd ryzen 7 5700ge firmware • amd ryzen 7 5700g firmware • amd ryzen 3 5300u firmware • amd ryzen 5 5500u firmware • amd ryzen 7 5700u firmware • amd ryzen 3 5400u firmware • amd ryzen 5 5560u firmware • amd ryzen 5 5600u firmware • amd ryzen 5 5600h firmware • amd ryzen 5 5600hs firmware • amd ryzen 7 5800u firmware • amd ryzen 7 5800h firmware • amd ryzen 7 5800hs firmware • amd ryzen 9 5900hs firmware • amd ryzen 9 5900hx firmware • amd ryzen 9 5980hs firmware • amd ryzen 9 5980hx firmware

Related

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References