Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-26392

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon RX 5000 Series & PRO W5000 Series

Default version status: unaffected

  • AMD Radeon Software to < 22.5.2affected
  • AMD Radeon Pro Software Enterprise to < 22.Q2affected
  • Enterprise Driver to < 22.10.20affected

AMD AMD Radeon RX 6000 Series & PRO W6000 Series

Default version status: unaffected

  • AMD Radeon Software to < 22.5.2affected
  • AMD Radeon Pro Software Enterprise to < 22.Q2affected
  • Enterprise Driver to < 22.10.20affected

AMD AMD Ryzen™ Embedded R1000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded R2000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded 5000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded V1000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™ Embedded V2000

Default version status: unaffected

  • variousaffected

AMD AMD Ryzen™Embedded V3000

Default version status: unaffected

  • variousaffected

References