CVE-2021-26392 Memory corruption in AMD Radeon RX 5000 Series & PRO W5000 Series

High 7.8 Published 9 Nov 2022 Updated 16 Sep 2024

An attacker with privileges can achieve OS/kernel code execution via an out-of-bounds write in AMD GPU firmware when loading a malicious Trusted Application.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-26392?

CVE-2021-26392 is a high-severity memory corruption vulnerability in Amd Radeon Software, published on 9 Nov 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

Weakness: CWE-787

Which versions are affected by CVE-2021-26392?

It affects 103 products.

Products include Amd Amd 3015ce Firmware, Amd Amd 3015e Firmware, Amd Amd 3020e Firmware, Amd Athlon Gold 3150c Firmware, Amd Athlon Gold 3150u Firmware, Amd Athlon Pro 3045b Firmware and 97 more.

How do I fix CVE-2021-26392?

No fix has been published for CVE-2021-26392 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2021-26392 being exploited?

There is no known exploitation of CVE-2021-26392 in the wild and no public exploit code.

All Amd Radeon Software vulnerabilities

Sources

Also known as GHSA-494r-cmj8-94j9.