high7.8
CVE-2021-26392
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain cod…
Impact
Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amd | Enterprise Driver | before 22.10.20 |
| Amd | Radeon Pro Software | before 22.q2 |
| Amd | Radeon Software | before 22.5.2 |
| Amd | Radeon Rx Vega 56 Firmware | All versions |
| Amd | Radeon Rx Vega 64 Firmware | All versions |
| Amd | Ryzen 3 2200ge Firmware | All versions |
| Amd | Ryzen 3 2200g Firmware | All versions |
| Amd | Ryzen 5 2400ge Firmware | All versions |
| Amd | Ryzen 5 2400g Firmware | All versions |
| Amd | Ryzen 3 3100 Firmware | All versions |
| Amd | Ryzen 3 3300x Firmware | All versions |
| Amd | Ryzen 5 3500 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-5001