CVE-2021-26367
MEDIUMDescription
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
Is your site exposed to CVE-2021-26367?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Affected Products
| Vendor | Product |
|---|---|
| amd | radeon_software |
| amd | radeon_rx_6300m |
| amd | radeon_rx_6400 |
| amd | radeon_rx_6450m |
| amd | radeon_rx_6500_xt |
| amd | radeon_rx_6500m |
| amd | radeon_rx_6550m |
| amd | radeon_rx_6550s |
| amd | radeon_rx_6600 |
| amd | radeon_rx_6600_xt |
| amd | radeon_rx_6600m |
| amd | radeon_rx_6600s |
| amd | radeon_rx_6650_xt |
| amd | radeon_rx_6650m |
| amd | radeon_rx_6650m_xt |
| amd | radeon_rx_6700 |
| amd | radeon_rx_6700_xt |
| amd | radeon_rx_6700m |
| amd | radeon_rx_6700s |
| amd | radeon_rx_6750_gre |
| amd | radeon_rx_6750_xt |
| amd | radeon_rx_6800 |
| amd | radeon_rx_6800_xt |
| amd | radeon_rx_6800m |
| amd | radeon_rx_6800s |
| amd | radeon_rx_6850m_xt |
| amd | radeon_rx_6900_xt |
| amd | radeon_rx_6950_xt |
| amd | radeon_software |
| amd | radeon_pro_w6300 |
| amd | radeon_pro_w6400 |
| amd | radeon_pro_w6600 |
| amd | radeon_pro_w6800 |
| amd | ryzen_9_5980hx_firmware |
| amd | ryzen_9_5980hx |
| amd | ryzen_3_3300u_firmware |
| amd | ryzen_3_3300u |
| amd | ryzen_3_3350u_firmware |
| amd | ryzen_3_3350u |
| amd | ryzen_5_3450u_firmware |
| amd | ryzen_5_3450u |
| amd | ryzen_5_3500u_firmware |
| amd | ryzen_5_3500u |
| amd | ryzen_5_3500c_firmware |
| amd | ryzen_5_3500c |
| amd | ryzen_5_3550h_firmware |
| amd | ryzen_5_3550h |
| amd | ryzen_5_3580u_firmware |
| amd | ryzen_5_3580u |
| amd | ryzen_7_3700u_firmware |
| amd | ryzen_7_3700u |
| amd | ryzen_7_3700c_firmware |
| amd | ryzen_7_3700c |
| amd | ryzen_7_3750h_firmware |
| amd | ryzen_7_3750h |
| amd | ryzen_7_3780u_firmware |
| amd | ryzen_7_3780u |
| amd | athlon_gold_3150c_firmware |
| amd | athlon_gold_3150c |
| amd | athlon_gold_3150u_firmware |
| amd | athlon_gold_3150u |
| amd | athlon_pro_3145b_firmware |
| amd | athlon_pro_3145b |
| amd | athlon_silver_3050c_firmware |
| amd | athlon_silver_3050c |
| amd | athlon_silver_3050u_firmware |
| amd | athlon_silver_3050u |
| amd | athlon_pro_3045b_firmware |
| amd | athlon_pro_3045b |
| amd | athlon_silver_3050e_firmware |
| amd | athlon_silver_3050e |
| amd | athlon_gold_pro_3150g_firmware |
| amd | athlon_gold_pro_3150g |
| amd | athlon_gold_3150g_firmware |
| amd | athlon_gold_3150g |
| amd | athlon_gold_pro_3150ge_firmware |
| amd | athlon_gold_pro_3150ge |
| amd | athlon_pro_300ge_firmware |
| amd | athlon_pro_300ge |
| amd | ryzen_3_4300ge_firmware |
| amd | ryzen_3_4300ge |
| amd | ryzen_5_4600ge_firmware |
| amd | ryzen_5_4600ge |
| amd | ryzen_7_4700ge_firmware |
| amd | ryzen_7_4700ge |
| amd | ryzen_3_4300g_firmware |
| amd | ryzen_3_4300g |
| amd | ryzen_5_4600g_firmware |
| amd | ryzen_5_4600g |
| amd | ryzen_7_4700g_firmware |
| amd | ryzen_7_4700g |
| amd | ryzen_3_5300ge_firmware |
| amd | ryzen_3_5300ge |
| amd | ryzen_3_5300g_firmware |
| amd | ryzen_3_5300g |
| amd | ryzen_5_5600ge_firmware |
| amd | ryzen_5_5600ge |
| amd | ryzen_5_5600g_firmware |
| amd | ryzen_5_5600g |
| amd | ryzen_7_5700ge_firmware |
| amd | ryzen_7_5700ge |
| amd | ryzen_7_5700g_firmware |
| amd | ryzen_7_5700g |
References
Frequently Asked Questions
What is CVE-2021-26367? +
How severe is CVE-2021-26367? +
What products are affected by CVE-2021-26367? +
How do I check if I'm vulnerable to CVE-2021-26367? +
Related Vulnerabilities
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to …
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to …
Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or …
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in …
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to …
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow an attacker with ring0 privileges and access to the BIOS menu or UEFI …