CVE-2021-26392

Summary

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

Affected Software

VendorProductVersion RangeStatus
AMDAMD Radeon RX 5000 Series & PRO W5000 SeriesAMD Radeon Software < 22.5.2affected
AMDAMD Radeon RX 5000 Series & PRO W5000 SeriesAMD Radeon Pro Software Enterprise < 22.Q2affected
AMDAMD Radeon RX 5000 Series & PRO W5000 SeriesEnterprise Driver < 22.10.20affected
AMDAMD Radeon RX 6000 Series & PRO W6000 SeriesAMD Radeon Software < 22.5.2affected
AMDAMD Radeon RX 6000 Series & PRO W6000 SeriesAMD Radeon Pro Software Enterprise < 22.Q2affected
AMDAMD Radeon RX 6000 Series & PRO W6000 SeriesEnterprise Driver < 22.10.20affected
AMDAMD Ryzen™ Embedded R1000variousaffected
AMDAMD Ryzen™ Embedded R2000variousaffected
AMDAMD Ryzen™ Embedded 5000variousaffected
AMDAMD Ryzen™ Embedded V1000variousaffected
AMDAMD Ryzen™ Embedded V2000variousaffected
AMDAMD Ryzen™Embedded V3000variousaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References