CVE-2024-21971

Summary

Improper input validation in AMD Crash Defender could allow an attacker to provide the Windows® system process ID to a kernel-mode driver, resulting in an operating system crash, potentially leading to denial of service.

Affected Software

VendorProductVersion RangeStatus
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 5000 Series Desktop ProcessorsAMD Software: PRO Edition 24.Q2 (24.10.20)unaffected
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7000 Series Desktop ProcessorsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)affected
AMDAMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 4000 Series Desktop Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 8000 Series Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 3000 Series Mobile Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 5000 Series Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 6000 Series Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7035 Series Processor with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7030 Series Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7030 Series Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7040 Series Processors with Radeon™ GraphicsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Ryzen™ 7045 Series Mobile ProcessorsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Ryzen™ 7045 Series Mobile ProcessorsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ RX 5000 Series Graphics ProductsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Radeon™ RX 5000 Series Graphics ProductsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ PRO W5000 Series Graphics ProductsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Radeon™ PRO W5000 Series Graphics ProductsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ RX 7000 Series Graphics ProductsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Radeon™ RX 7000 Series Graphics ProductsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ PRO W7000 Series Graphics ProductsAMD Software: Adrenalin Edition 24.7.1 (24.10.29.01)unaffected
AMDAMD Radeon™ PRO W7000 Series Graphics ProductsAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ VIIAMD Software: Adrenalin Edition 24.7.1 (23.19.16)unaffected
AMDAMD Radeon™ VIIAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ PRO VIIAMD Software: Adrenalin Edition 24.7.1 (23.19.16)unaffected
AMDAMD Radeon™ PRO VIIAMD Software: PRO Edition 24.Q2 (23.19.16.01)unaffected
AMDAMD Radeon™ Instinct™ MI25Contact your AMD Customer Engineering representativeunknown
AMDAMD Radeon™ PRO V520Contact your AMD Customer Engineering representativeunknown
AMDAMD Radeon™ PRO V620Contact your AMD Customer Engineering representativeunknown
AMDAMD Radeon™ PRO V710Contact your AMD Customer Engineering representativeunknown
AMDAMD Ryzen™ Embedded R100024.10.21.01unaffected
AMDAMD Ryzen™ Embedded R100023.19.16unaffected
AMDAMD Ryzen™ Embedded R200024.10.21.01unaffected
AMDAMD Ryzen™ Embedded R200023.19.16unaffected
AMDAMD Ryzen™ Embedded 700024.10.21.01unaffected
AMDAMD Ryzen™ Embedded 700023.19.16unaffected
AMDAMD Ryzen™ Embedded V100024.10.21.01unaffected
AMDAMD Ryzen™ Embedded V100023.19.16unaffected
AMDAMD Ryzen™ Embedded V200024.10.21.01unaffected
AMDAMD Ryzen™ Embedded V200023.19.16unaffected
AMDAMD Ryzen™ Embedded V300024.10.21.01unaffected
AMDAMD Ryzen™ Embedded V300023.19.16unaffected

Weaknesses

  • CWE-1220: CWE-1220 - Insufficient Granularity of Access Control

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References