CVE-2021-26382

Published: Jul 14, 2022Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.

Affected (35)

Amd

35 products

Ryzen 7 5700g Firmware

Ryzen 7 5700ge Firmware

Ryzen 5 5600g Firmware

Ryzen 5 5600ge Firmware

Ryzen 3 5300g Firmware

Ryzen 3 5300ge Firmware

Ryzen 9 5980hx Firmware

Ryzen 9 5980hs Firmware

Ryzen 7 5825u Firmware

Ryzen 9 5900hx Firmware

Ryzen 9 5900hs Firmware

Ryzen 7 5825c Firmware

Ryzen 7 5800h Firmware

Ryzen 5 5625u Firmware

Ryzen 7 5800hs Firmware

Ryzen 5 5625c Firmware

Ryzen 5 5600h Firmware

Ryzen 5 5600hs Firmware

Ryzen 7 5800u Firmware

Ryzen 5 5600u Firmware

Ryzen 5 5560u Firmware

Ryzen 3 5425u Firmware

Ryzen 3 5425c Firmware

Ryzen 3 5400u Firmware

Ryzen 3 5125c Firmware

Ryzen 3 3200u Firmware

Ryzen 3 3250u Firmware

Ryzen 3 3300u Firmware

Ryzen 5 3500u Firmware

Ryzen 5 3550h Firmware

Ryzen 5 3580u Firmware

Ryzen 7 3700u Firmware

Ryzen 7 Pro 3700u Firmware

Ryzen 7 3750h Firmware

Ryzen 7 3780u Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 5700g	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5700ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 7 5700ge	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 5600g	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 5 5600ge	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300g Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 5300g	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5300ge Firmware	Before comboam4_v2_pi_1.2.0.6c

Running on/with	Platform Versions
Amd Ryzen 3 5300ge	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hx Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5980hx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5980hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5980hs	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5825u	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hx Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5900hx	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 9 5900hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 9 5900hs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5825c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5825c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800h Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5625u	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800hs	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5625c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5625c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600h Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600hs Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600hs	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 5800u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 7 5800u	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5600u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5600u	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 5560u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 5 5560u	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5425u	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5425c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5425c	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5400u Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5400u	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 5125c Firmware	Before cezannepi-fp6_1.0.0.9

Running on/with	Platform Versions
Amd Ryzen 3 5125c	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3200u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 3 3200u	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3250u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 3 3250u	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 3 3300u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 3 3300u	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3500u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 5 3500u	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3550h Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 5 3550h	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 5 3580u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 5 3580u	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3700u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 7 3700u	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 Pro 3700u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 7 Pro 3700u	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3750h Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 7 3750h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Amd Ryzen 7 3780u Firmware	Before renoirpi-fp6_1.0.0.7

Running on/with	Platform Versions
Amd Ryzen 7 3780u	All versions

References (2)

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: psirt@amd.com

Vendor Advisory

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.