CVE-2021-26367 : A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs),

A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.

Published 2024-08-13 16:50:06

Updated 2024-12-12 20:41:56

Source Advanced Micro Devices Inc.

View at NVD, CVE.org

Products affected by CVE-2021-26367

AMD » Radeon Software » Adrenalin Edition
Versions before (<) 23.12.1
cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*
Matching versions
When used together with: AMD » Radeon Rx 6300m » Version: N/A
When used together with: AMD » Radeon Rx 6400 » Version: N/A
When used together with: AMD » Radeon Rx 6450m » Version: N/A
When used together with: AMD » Radeon Rx 6500 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6500m » Version: N/A
When used together with: AMD » Radeon Rx 6550m » Version: N/A
When used together with: AMD » Radeon Rx 6550s » Version: N/A
When used together with: AMD » Radeon Rx 6600 » Version: N/A
When used together with: AMD » Radeon Rx 6600 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6600m » Version: N/A
When used together with: AMD » Radeon Rx 6600s » Version: N/A
When used together with: AMD » Radeon Rx 6650 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6650m » Version: N/A
When used together with: AMD » Radeon Rx 6650m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700 » Version: N/A
When used together with: AMD » Radeon Rx 6700 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6700m » Version: N/A
When used together with: AMD » Radeon Rx 6700s » Version: N/A
When used together with: AMD » Radeon Rx 6750 Gre » Version: N/A
When used together with: AMD » Radeon Rx 6750 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800 » Version: N/A
When used together with: AMD » Radeon Rx 6800 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6800m » Version: N/A
When used together with: AMD » Radeon Rx 6800s » Version: N/A
When used together with: AMD » Radeon Rx 6850m Xt » Version: N/A
When used together with: AMD » Radeon Rx 6900 Xt » Version: N/A
When used together with: AMD » Radeon Rx 6950 Xt » Version: N/A
AMD » Radeon Software » PRO Edition
Versions up to, including, (<=) 23.q4
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
Matching versions
When used together with: AMD » Radeon Pro W6300 » Version: N/A
When used together with: AMD » Radeon Pro W6400 » Version: N/A
When used together with: AMD » Radeon Pro W6600 » Version: N/A
When used together with: AMD » Radeon Pro W6800 » Version: N/A
AMD » Athlon Gold Pro 3150g Firmware
Versions before (<) comboam4pi_1.0.0.9
cpe:2.3:o:amd:athlon_gold_pro_3150g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150g » Version: N/A
AMD » Athlon Gold Pro 3150ge Firmware
Versions before (<) comboam4pi_1.0.0.9
cpe:2.3:o:amd:athlon_gold_pro_3150ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold Pro 3150ge » Version: N/A
AMD » Athlon Pro 300ge Firmware
Versions before (<) comboam4pi_1.0.0.9
cpe:2.3:o:amd:athlon_pro_300ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 300ge » Version: N/A
AMD » Ryzen 7 4700g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_7_4700g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4700g » Version: N/A
AMD » Ryzen 7 4700ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_7_4700ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 4700ge » Version: N/A
AMD » Ryzen 5 4600g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_5_4600g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4600g » Version: N/A
AMD » Ryzen 5 4600ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_5_4600ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 4600ge » Version: N/A
AMD » Ryzen 3 4300g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_3_4300g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 4300g » Version: N/A
AMD » Ryzen 3 4300ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_3_4300ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 4300ge » Version: N/A
AMD » Athlon Gold 3150u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_gold_3150u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold 3150u » Version: N/A
AMD » Athlon Silver 3050u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_silver_3050u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver 3050u » Version: N/A
AMD » Ryzen 9 5980hx Firmware
Versions before (<) cezannepi-fp6_1.0.0.6
cpe:2.3:o:amd:ryzen_9_5980hx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 9 5980hx » Version: N/A
AMD » Ryzen 7 5700g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_7_5700g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700g » Version: N/A
AMD » Ryzen 7 5700ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_7_5700ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 5700ge » Version: N/A
AMD » Ryzen 3 5300g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_3_5300g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5300g » Version: N/A
AMD » Ryzen 3 5300ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_3_5300ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 5300ge » Version: N/A
AMD » Ryzen 5 5600g Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_5_5600g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600g » Version: N/A
AMD » Ryzen 5 5600ge Firmware
Versions before (<) comboam4v2_pi_1.2.0.5
cpe:2.3:o:amd:ryzen_5_5600ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 5600ge » Version: N/A
AMD » Ryzen 7 3750h Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_7_3750h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3750h » Version: N/A
AMD » Ryzen 7 3700u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_7_3700u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3700u » Version: N/A
AMD » Ryzen 5 3550h Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_5_3550h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3550h » Version: N/A
AMD » Ryzen 5 3500u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_5_3500u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3500u » Version: N/A
AMD » Ryzen 3 3300u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_3_3300u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3300u » Version: N/A
AMD » Ryzen 3 3350u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_3_3350u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 3 3350u » Version: N/A
AMD » Ryzen 5 3580u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_5_3580u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3580u » Version: N/A
AMD » Ryzen 7 3780u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_7_3780u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3780u » Version: N/A
AMD » Athlon Silver 3050e Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_silver_3050e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver 3050e » Version: N/A
AMD » Athlon Pro 3045b Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_pro_3045b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 3045b » Version: N/A
AMD » Athlon Silver 3050c Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_silver_3050c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Silver 3050c » Version: N/A
AMD » Athlon Pro 3145b Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_pro_3145b_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Pro 3145b » Version: N/A
AMD » Athlon Gold 3150c Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:athlon_gold_3150c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold 3150c » Version: N/A
AMD » Ryzen 5 3450u Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_5_3450u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3450u » Version: N/A
AMD » Ryzen 5 3500c Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_5_3500c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5 3500c » Version: N/A
AMD » Ryzen 7 3700c Firmware
Versions before (<) picassopi-fp5_1.0.0.e
cpe:2.3:o:amd:ryzen_7_3700c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 7 3700c » Version: N/A
AMD » Athlon Gold 3150g Firmware
Versions before (<) comboam4pi_1.0.0.9
cpe:2.3:o:amd:athlon_gold_3150g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Athlon Gold 3150g » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-26367

EPSS FAQ

0.02%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 4 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-26367

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.7	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H	N/A	N/A	Advanced Micro Devices Inc.	2024-08-13
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High
6.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H	0.8	5.2	NIST	2024-12-12
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High
5.7	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H	0.5	5.2	Advanced Micro Devices Inc.	2024-08-13
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

References for CVE-2021-26367

https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html

Client Vulnerabilities – Aug 2024
Vendor Advisory

CVEs referencing this url
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html

AMD Graphics Driver Vulnerabilities – August 2024 
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-26367

Products affected by CVE-2021-26367

Exploit prediction scoring system (EPSS) score for CVE-2021-26367

CVSS scores for CVE-2021-26367

References for CVE-2021-26367