medium5.5
CVE-2021-26333
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver.
Impact
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Chipset Driver | before 3.08.17.735 |
| Amd | Psp Driver | before 5.17.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html
- http://seclists.org/fulldisclosure/2021/Sep/24
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009
- http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html
- http://seclists.org/fulldisclosure/2021/Sep/24
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009