medium4.4
CVE-2021-26382
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective sign…
Impact
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Ryzen 7 5700g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 7 5700ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 5 5600g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 5 5600ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 3 5300g Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 3 5300ge Firmware | before comboam4_v2_pi_1.2.0.6c |
| Amd | Ryzen 9 5980hx Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5980hs Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 7 5825u Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5900hx Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 9 5900hs Firmware | before cezannepi-fp6_1.0.0.9 |
| Amd | Ryzen 7 5825c Firmware | before cezannepi-fp6_1.0.0.9 |