CVE-2021-26386

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-05-2022 09:15

Last modified: - 01-06-2022 05:47

Total changes: - 2

Description

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Unchanged

Scope

None

User interaction

7.8

Base score

1.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=amd AND product=ryzen_3_2200u_firmware AND version=-

vendor=amd AND product=ryzen_3_2200u AND version=-

AND

vendor=amd AND product=ryzen_3_2300u_firmware AND version=-

vendor=amd AND product=ryzen_3_2300u AND version=-

AND

vendor=amd AND product=ryzen_3_3100_firmware AND version=-

vendor=amd AND product=ryzen_3_3100 AND version=-

AND

vendor=amd AND product=ryzen_3_3300g_firmware AND version=-

vendor=amd AND product=ryzen_3_3300g AND version=-

AND

vendor=amd AND product=ryzen_3_3300x_firmware AND version=-

vendor=amd AND product=ryzen_3_3300x AND version=-

AND

vendor=amd AND product=ryzen_3_5125c_firmware AND version=-

vendor=amd AND product=ryzen_3_5125c AND version=-

AND

vendor=amd AND product=ryzen_3_5400u_firmware AND version=-

vendor=amd AND product=ryzen_3_5400u AND version=-

AND

vendor=amd AND product=ryzen_3_5425c_firmware AND version=-

vendor=amd AND product=ryzen_3_5425c AND version=-

AND

vendor=amd AND product=ryzen_3_5425u_firmware AND version=-

vendor=amd AND product=ryzen_3_5425u AND version=-

AND

vendor=amd AND product=ryzen_5300g_firmware AND version=-

vendor=amd AND product=ryzen_5300g AND version=-

AND

vendor=amd AND product=ryzen_5300ge_firmware AND version=-

vendor=amd AND product=ryzen_5300ge AND version=-

AND

vendor=amd AND product=ryzen_5600g_firmware AND version=-

vendor=amd AND product=ryzen_5600g AND version=-

AND

vendor=amd AND product=ryzen_5600ge_firmware AND version=-

vendor=amd AND product=ryzen_5600ge AND version=-

AND

vendor=amd AND product=ryzen_5600x_firmware AND version=-

vendor=amd AND product=ryzen_5600x AND version=-

AND

vendor=amd AND product=ryzen_5700g_firmware AND version=-

vendor=amd AND product=ryzen_5700g AND version=-

AND

vendor=amd AND product=ryzen_5700ge_firmware AND version=-

vendor=amd AND product=ryzen_5700ge AND version=-

AND

vendor=amd AND product=ryzen_5800x_firmware AND version=-

vendor=amd AND product=ryzen_5800x AND version=-

AND

vendor=amd AND product=ryzen_5800x3d_firmware AND version=-

vendor=amd AND product=ryzen_5800x3d AND version=-

AND

vendor=amd AND product=ryzen_5900x_firmware AND version=-

vendor=amd AND product=ryzen_5900x AND version=-

AND

vendor=amd AND product=ryzen_5950x_firmware AND version=-

vendor=amd AND product=ryzen_5950x AND version=-

AND

vendor=amd AND product=ryzen_5_2500u_firmware AND version=-

vendor=amd AND product=ryzen_5_2500u AND version=-

AND

vendor=amd AND product=ryzen_5_2600_firmware AND version=-

vendor=amd AND product=ryzen_5_2600 AND version=-

AND

vendor=amd AND product=ryzen_5_2600h_firmware AND version=-

vendor=amd AND product=ryzen_5_2600h AND version=-

AND

vendor=amd AND product=ryzen_5_2600x_firmware AND version=-

vendor=amd AND product=ryzen_5_2600x AND version=-

AND

vendor=amd AND product=ryzen_5_3400g_firmware AND version=-

vendor=amd AND product=ryzen_5_3400g AND version=-

AND

vendor=amd AND product=ryzen_5_3450g_firmware AND version=-

vendor=amd AND product=ryzen_5_3450g AND version=-

AND

vendor=amd AND product=ryzen_5_3600_firmware AND version=-

vendor=amd AND product=ryzen_5_3600 AND version=-

AND

vendor=amd AND product=ryzen_5_3600x_firmware AND version=-

vendor=amd AND product=ryzen_5_3600x AND version=-

AND

vendor=amd AND product=ryzen_5_5560u_firmware AND version=-

vendor=amd AND product=ryzen_5_5560u AND version=-

AND

vendor=amd AND product=ryzen_5_5600h_firmware AND version=-

vendor=amd AND product=ryzen_5_5600h AND version=-

AND

vendor=amd AND product=ryzen_5_5600hs_firmware AND version=-

vendor=amd AND product=ryzen_5_5600hs AND version=-

AND

vendor=amd AND product=ryzen_5_5600u_firmware AND version=-

vendor=amd AND product=ryzen_5_5600u AND version=-

AND

vendor=amd AND product=ryzen_5_5600x_firmware AND version=-

vendor=amd AND product=ryzen_5_5600x AND version=-

AND

vendor=amd AND product=ryzen_5_5625c_firmware AND version=-

vendor=amd AND product=ryzen_5_5625c AND version=-

AND

vendor=amd AND product=ryzen_5_5625u_firmware AND version=-

vendor=amd AND product=ryzen_5_5625u AND version=-

AND

vendor=amd AND product=ryzen_5_5700g_firmware AND version=-

vendor=amd AND product=ryzen_5_5700g AND version=-

AND

vendor=amd AND product=ryzen_5_5700ge_firmware AND version=-

vendor=amd AND product=ryzen_5_5700ge AND version=-

AND

vendor=amd AND product=ryzen_7_2700_firmware AND version=-

vendor=amd AND product=ryzen_7_2700 AND version=-

AND

vendor=amd AND product=ryzen_7_2700u_firmware AND version=-

vendor=amd AND product=ryzen_7_2700u AND version=-

AND

vendor=amd AND product=ryzen_7_2700x_firmware AND version=-

vendor=amd AND product=ryzen_7_2700x AND version=-

AND

vendor=amd AND product=ryzen_7_2800h_firmware AND version=-

vendor=amd AND product=ryzen_7_2800h AND version=-

AND

vendor=amd AND product=ryzen_7_3700x_firmware AND version=-

vendor=amd AND product=ryzen_7_3700x AND version=-

AND

vendor=amd AND product=ryzen_7_3800x_firmware AND version=-

vendor=amd AND product=ryzen_7_3800x AND version=-

AND

vendor=amd AND product=ryzen_7_5800h_firmware AND version=-

vendor=amd AND product=ryzen_7_5800h AND version=-

AND

vendor=amd AND product=ryzen_7_5800hs_firmware AND version=-

vendor=amd AND product=ryzen_7_5800hs AND version=-

AND

vendor=amd AND product=ryzen_7_5800u_firmware AND version=-

vendor=amd AND product=ryzen_7_5800u AND version=-

AND

vendor=amd AND product=ryzen_7_5825c_firmware AND version=-

vendor=amd AND product=ryzen_7_5825c AND version=-

AND

vendor=amd AND product=ryzen_7_5825u_firmware AND version=-

vendor=amd AND product=ryzen_7_5825u AND version=-

AND

vendor=amd AND product=ryzen_9_3900x_firmware AND version=-

vendor=amd AND product=ryzen_9_3900x AND version=-

AND

vendor=amd AND product=ryzen_9_3950x_firmware AND version=-

vendor=amd AND product=ryzen_9_3950x AND version=-

AND

vendor=amd AND product=ryzen_9_5900hs_firmware AND version=-

vendor=amd AND product=ryzen_9_5900hs AND version=-

AND

vendor=amd AND product=ryzen_9_5900hx_firmware AND version=-

vendor=amd AND product=ryzen_9_5900hx AND version=-

AND

vendor=amd AND product=ryzen_9_5980hs_firmware AND version=-

vendor=amd AND product=ryzen_9_5980hs AND version=-

AND

vendor=amd AND product=ryzen_9_5980hx_firmware AND version=-

vendor=amd AND product=ryzen_9_5980hx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2920x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2920x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2950x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2950x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2970wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2970wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_2990wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_2990wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_3960x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_3960x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_3970x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_3970x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_3990x_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_3990x AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_3945wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_3945wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_3955wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_3955wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_3975wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_3975wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_3995wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_3995wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5945wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5945wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5955wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5955wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5965wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5965wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5975wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5975wx AND version=-

AND

vendor=amd AND product=ryzen_threadripper_pro_5995wx_firmware AND version=-

vendor=amd AND product=ryzen_threadripper_pro_5995wx AND version=-

Reference

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027

Keywords

CVE-2021-26386

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-26386

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures