CVE-2021-26367: Medium severity amd radeon software for hip vulnerability
Published Aug 13, 2024
·Updated
A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.
Affected Software
103 affected components
All of the following
AMD Radeon Software<23.12.1
Any of the following
AMD Radeon Rx 6300m
AMD Radeon Rx 6400
AMD Radeon Rx 6450m
AMD Radeon Rx 6500 Xt
AMD Radeon Rx 6500m
AMD Radeon Rx 6550m
AMD Radeon Rx 6550s
AMD Radeon Rx 6600
AMD Radeon Rx 6600 Xt
AMD Radeon Rx 6600m
AMD Radeon Rx 6600s
AMD Radeon Rx 6650 Xt
AMD Radeon Rx 6650m
AMD Radeon Rx 6650m Xt
AMD Radeon Rx 6700
AMD Radeon Rx 6700 Xt
AMD Radeon Rx 6700m
AMD Radeon Rx 6700s
AMD Radeon Rx 6750 Gre
AMD Radeon Rx 6750 Xt
AMD Radeon Rx 6800
AMD Radeon Rx 6800 Xt
AMD Radeon Rx 6800m
AMD Radeon Rx 6800s
AMD Radeon Rx 6850m Xt
AMD Radeon Rx 6900 Xt
AMD Radeon Rx 6950 Xt
All of the following
AMD Radeon Software<=23.q4
Any of the following
AMD Radeon Pro W6300
AMD Radeon Pro W6400
AMD Radeon Pro W6600
AMD Radeon Pro W6800
All of the following
AMD Ryzen 9 5980hx Firmware<cezannepi-fp6_1.0.0.6
AMD Ryzen 9 5980hx
All of the following
AMD Ryzen 3 3300u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 3 3300u
All of the following
AMD Ryzen 3 3350u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 3 3350u
All of the following
AMD Ryzen 5 3450u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3450u
All of the following
AMD Ryzen 5 3500u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3500u
All of the following
AMD Ryzen 5 3500c Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3500c
All of the following
AMD Ryzen 5 3550h Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3550h
All of the following
AMD Ryzen 5 3580u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 5 3580u
All of the following
AMD Ryzen 7 3700u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3700u
All of the following
AMD Ryzen 7 3700c Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3700c
All of the following
AMD Ryzen 7 3750h Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3750h
All of the following
AMD Ryzen 7 3780u Firmware<picassopi-fp5_1.0.0.e
AMD Ryzen 7 3780u
All of the following
AMD Athlon Gold 3150c Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Gold 3150c
All of the following
AMD Athlon Gold 3150u Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Gold 3150u
All of the following
AMD Athlon Pro 3145b Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Pro 3145b
All of the following
AMD Athlon Silver 3050c Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Silver 3050c
All of the following
AMD Athlon Silver 3050u Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Silver 3050u
All of the following
AMD Athlon Pro 3045b Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Pro 3045b
All of the following
AMD Athlon Silver 3050e Firmware<picassopi-fp5_1.0.0.e
AMD Athlon Silver 3050e
All of the following
AMD Athlon Gold Pro 3150g Firmware<comboam4pi_1.0.0.9
AMD Athlon Gold Pro 3150g
All of the following
AMD Athlon Gold 3150g Firmware<comboam4pi_1.0.0.9
AMD Athlon Gold 3150g
All of the following
AMD Athlon Gold Pro 3150ge Firmware<comboam4pi_1.0.0.9
AMD Athlon Gold Pro 3150ge
All of the following
AMD Athlon Pro 300ge Firmware<comboam4pi_1.0.0.9
AMD Athlon Pro 300ge
All of the following
AMD Ryzen 3 4300ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 3 4300ge
All of the following
AMD Ryzen 5 4600ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 5 4600ge
All of the following
AMD Ryzen 7 4700ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 7 4700ge
All of the following
AMD Ryzen 3 4300g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 3 4300g
All of the following
AMD Ryzen 5 4600g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 5 4600g
All of the following
AMD Ryzen 7 4700g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 7 4700g
All of the following
AMD Ryzen 3 5300ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 3 5300ge
All of the following
AMD Ryzen 3 5300g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 3 5300g
All of the following
AMD Ryzen 5 5600ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 5 5600ge
All of the following
AMD Ryzen 5 5600g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 5 5600g
All of the following
AMD Ryzen 7 5700ge Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 7 5700ge
All of the following
AMD Ryzen 7 5700g Firmware<comboam4v2_pi_1.2.0.5
AMD Ryzen 7 5700g
Event History
Aug 13, 2024
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2021-26367?
The severity of CVE-2021-26367 is rated as medium, as it can lead to a loss of integrity and availability.
2
How do I fix CVE-2021-26367?
To fix CVE-2021-26367, ensure that you update the AMD Radeon Software to the latest version beyond 23.12.1.
3
What software is affected by CVE-2021-26367?
CVE-2021-26367 affects AMD Radeon Software versions up to 23.12.1, along with specific AMD Radeon and Ryzen hardware.
4
What are the potential impacts of CVE-2021-26367?
The potential impacts of CVE-2021-26367 include unauthorized access to memory regions, leading to a loss of integrity and availability.
5
Can CVE-2021-26367 be exploited remotely?
CVE-2021-26367 requires local access to the affected systems, so it cannot be exploited remotely.