CVE-2021-26360: High severity amd enterprise driver vulnerability
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-26360?
CVE-2021-26360 is a vulnerability that allows an attacker with local access to the system to make unauthorized modifications of the security configuration of the SOC registers, potentially leading to arbitrary code execution in AMD secure processors.
Which software versions are affected by CVE-2021-26360?
CVE-2021-26360 affects AMD Enterprise Driver versions up to and excluding 22.10.20, AMD Radeon Pro Software versions up to and excluding 22.q2, and AMD Radeon Software versions up to and excluding 22.5.2.
What is the severity of CVE-2021-26360?
CVE-2021-26360 has a severity rating of 7.8, which is considered high.
How can I fix CVE-2021-26360?
To fix CVE-2021-26360, it is recommended to update to the latest versions of AMD Enterprise Driver, AMD Radeon Pro Software, or AMD Radeon Software, depending on the affected software.
Where can I find more information about CVE-2021-26360?
You can find more information about CVE-2021-26360 on the official AMD Product Security Bulletin: [https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029](https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029)