CVE-2021-26360 - Vulnerability Details

Vendors	Products
Amd	Enterprise Driver Radeon Pro Software Radeon Pro W6300m Radeon Pro W6400 Radeon Pro W6500m Radeon Pro W6600 Radeon Pro W6600m Radeon Pro W6600x Radeon Pro W6800 Radeon Pro W6800x Radeon Pro W6800x Duo Radeon Pro W6900x Radeon Rx 6300m Radeon Rx 6400 Radeon Rx 6500 Xt Radeon Rx 6500m Radeon Rx 6600 Radeon Rx 6600 Xt Radeon Rx 6600m Radeon Rx 6600s Radeon Rx 6650 Xt Radeon Rx 6650m Radeon Rx 6650m Xt Radeon Rx 6700 Radeon Rx 6700 Xt Radeon Rx 6700m Radeon Rx 6700s Radeon Rx 6750 Xt Radeon Rx 6800 Radeon Rx 6800 Xt Radeon Rx 6800m Radeon Rx 6800s Radeon Rx 6850m Xt Radeon Rx 6900 Xt Radeon Rx 6950 Xt Radeon Software

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2021-26360
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029
https://www.cve.org/CVERecord?id=CVE-2021-26360

Type	Values Removed	Values Added
Weaknesses		CWE-284
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-26360", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "assignerShortName": "AMD", "datePublished": "2022-11-09T20:44:26.034Z", "dateUpdated": "2025-05-01T14:12:12.910Z", "dateReserved": "2021-01-29T00:00:00.000Z"}, "containers": {"cna": {"datePublic": "2022-11-08T00:00:00.000Z", "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2022-11-09T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor\u2019s encrypted memory contents which may lead to arbitrary code execution in ASP."}], "affected": [{"vendor": "AMD", "product": "AMD Radeon RX 6000 Series & PRO W6000 Series", "versions": [{"version": "AMD Radeon Software", "status": "affected", "lessThan": "22.5.2", "versionType": "custom"}, {"version": "AMD Radeon Pro Software Enterprise", "status": "affected", "lessThan": "22.Q2", "versionType": "custom"}, {"version": "Enterprise Driver", "status": "affected", "lessThan": "22.10.20", "versionType": "custom"}]}], "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "TBD"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"advisory": "AMD-SB-1029", "discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:26:25.015Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "CWE-284 Improper Access Control"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-01T14:11:37.852727Z", "id": "CVE-2021-26360", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-01T14:12:12.910Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2021-26360 (string)

assignerOrgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

assignerShortName : AMD (string)

datePublished : 2022-11-09T20:44:26.034Z (string)

dateUpdated : 2025-05-01T14:12:12.910Z (string)

dateReserved : 2021-01-29T00:00:00.000Z (string)

}

containers : { »

cna : { »

datePublic : 2022-11-08T00:00:00.000Z (string)

providerMetadata : { »

orgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

shortName : AMD (string)

dateUpdated : 2022-11-09T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP. (string)

}

]

affected : [ »

0 : { »

vendor : AMD (string)

product : AMD Radeon RX 6000 Series & PRO W6000 Series (string)

versions : [ »

0 : { »

version : AMD Radeon Software (string)

status : affected (string)

lessThan : 22.5.2 (string)

versionType : custom (string)

}

1 : { »

version : AMD Radeon Pro Software Enterprise (string)

status : affected (string)

lessThan : 22.Q2 (string)

versionType : custom (string)

}

2 : { »

version : Enterprise Driver (string)

status : affected (string)

lessThan : 22.10.20 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : TBD (string)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

source : { »

advisory : AMD-SB-1029 (string)

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T20:26:25.015Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-284 (string)

lang : en (string)

description : CWE-284 Improper Access Control (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-01T14:11:37.852727Z (string)

id : CVE-2021-26360 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-01T14:12:12.910Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:26:25.015Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-26360", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-05-01T14:11:37.852727Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-01T14:12:08.635Z"}}], "cna": {"source": {"advisory": "AMD-SB-1029", "discovery": "EXTERNAL"}, "affected": [{"vendor": "AMD", "product": "AMD Radeon RX 6000 Series & PRO W6000 Series", "versions": [{"status": "affected", "version": "AMD Radeon Software", "lessThan": "22.5.2", "versionType": "custom"}, {"status": "affected", "version": "AMD Radeon Pro Software Enterprise", "lessThan": "22.Q2", "versionType": "custom"}, {"status": "affected", "version": "Enterprise Driver", "lessThan": "22.10.20", "versionType": "custom"}]}], "datePublic": "2022-11-08T00:00:00.000Z", "references": [{"url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor\u2019s encrypted memory contents which may lead to arbitrary code execution in ASP."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "TBD"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2022-11-09T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2021-26360", "state": "PUBLISHED", "dateUpdated": "2025-05-01T14:12:12.910Z", "dateReserved": "2021-01-29T00:00:00.000Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2022-11-09T20:44:26.034Z", "assignerShortName": "AMD"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T20:26:25.015Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.8 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2021-26360 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-01T14:11:37.852727Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-284 (string)

description : CWE-284 Improper Access Control (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-01T14:12:08.635Z (string)

}

]

cna : { »

source : { »

advisory : AMD-SB-1029 (string)

discovery : EXTERNAL (string)

}

affected : [ »

0 : { »

vendor : AMD (string)

product : AMD Radeon RX 6000 Series & PRO W6000 Series (string)

versions : [ »

0 : { »

status : affected (string)

version : AMD Radeon Software (string)

lessThan : 22.5.2 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : AMD Radeon Pro Software Enterprise (string)

lessThan : 22.Q2 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : Enterprise Driver (string)

lessThan : 22.10.20 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-11-08T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : TBD (string)

}

]

}

]

providerMetadata : { »

orgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

shortName : AMD (string)

dateUpdated : 2022-11-09T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2021-26360 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-01T14:12:12.910Z (string)

dateReserved : 2021-01-29T00:00:00.000Z (string)

assignerOrgId : b58fc414-a1e4-4f92-9d70-1add41838648 (string)

datePublished : 2022-11-09T20:44:26.034Z (string)

assignerShortName : AMD (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "F418EA2F-C021-44A7-9A8F-F6512A857BF9", "versionEndExcluding": "22.10.20", "vulnerable": true}, {"criteria": "cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "5C79E0A6-9108-449C-AD2B-6FDF1FB7D643", "versionEndExcluding": "22.q2", "vulnerable": true}, {"criteria": "cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5AEE9E9-3A38-4483-AD76-2CEA7096BF0A", "versionEndExcluding": "22.5.2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*", "matchCriteriaId": "9CCC24F7-17CD-422A-B047-3E8B32D7B3F0", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DB91262-2EF4-4F0D-8B61-0012BD25E7A8", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*", "matchCriteriaId": "EACFFECA-179B-4911-85DE-D7270610E4A9", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*", "matchCriteriaId": "3083C065-5A2C-4B2D-9C1F-5793BA3C0A52", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*", "matchCriteriaId": "47A9B2F1-D9C5-47F8-9B2D-7C2A1495972A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*", "matchCriteriaId": "19588B3D-3F44-4127-8989-B535D4391201", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*", "matchCriteriaId": "7557738A-5D93-4117-8FF2-9A27CD0E6BC5", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1BC3034-8C33-4AAF-BE81-9BCFBF0EE56A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*", "matchCriteriaId": "697BB742-0A55-4165-B5BD-5BDCD67B62CD", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*", "matchCriteriaId": "14599A66-17C9-4072-AA0D-EAE86DB496DD", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C66880A-FB33-477D-93FD-C280A4547D66", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CD3F898-5AB1-4E60-A086-ADCF33820154", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC1F7CD2-7D13-48A9-A7CC-3547A1D241DB", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4FED1D5-F31A-44C9-9101-D70486CC6FC7", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C24DE61-4036-42BF-A08F-67C234706703", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "03D9040F-1D1D-49E5-A60E-4393F5D76B60", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:*", "matchCriteriaId": "A76A792F-7026-4F29-9A00-3A2EAB2DE5FC", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:*", "matchCriteriaId": "33DAF63F-C468-438C-97C3-B6CE8BD12858", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A82D4745-ACAB-4FC2-A63D-3B0FEA208BED", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD80D674-1DD4-44E0-8C38-8341A7F392B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "10DD7029-9299-4901-A3D1-84D6102471B9", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F73C59A-CDE2-4203-921F-1831D4ACFD2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "C980129B-D717-47F7-A6C1-5EB64FB1BF9A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:*", "matchCriteriaId": "B76C585C-FCC8-456D-A63C-7A769AF5EB07", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC0C52E8-26B1-4F77-B9D3-D08BFF72DAFB", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "9466279D-0582-464E-AFCC-20872CC99B56", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:*", "matchCriteriaId": "12EF0B24-689D-4BE8-98D5-D88A84D5E473", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "B58299A7-7CA4-4EF8-81DC-9A41AA84FB2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB218988-1483-4D96-9075-F79EDBC79974", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F14D5A16-F7BE-427A-98AB-2E120DB756DC", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "82E128B2-A9B7-4A1C-9ACF-7EB323B72B6F", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFC4A007-BEFD-4BF0-A176-7ECD6150041C", "vulnerable": false}, {"criteria": "cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B658454-C160-4EBA-9F7A-E2B9FDEA8A1E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor\u2019s encrypted memory contents which may lead to arbitrary code execution in ASP."}, {"lang": "es", "value": "Un atacante con acceso local al sistema puede realizar modificaciones no autorizadas en la configuraci\u00f3n de seguridad de los registros SOC. Esto podr\u00eda permitir una posible corrupci\u00f3n del contenido de la memoria cifrada del procesador seguro AMD, lo que podr\u00eda provocar la ejecuci\u00f3n de c\u00f3digo arbitrario en ASP."}], "id": "CVE-2021-26360", "lastModified": "2025-05-01T15:15:54.130", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-11-09T21:15:11.690", "references": [{"source": "psirt@amd.com", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-284"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F418EA2F-C021-44A7-9A8F-F6512A857BF9 (string)

versionEndExcluding : 22.10.20 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:* (string)

matchCriteriaId : 5C79E0A6-9108-449C-AD2B-6FDF1FB7D643 (string)

versionEndExcluding : 22.q2 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F5AEE9E9-3A38-4483-AD76-2CEA7096BF0A (string)

versionEndExcluding : 22.5.2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9CCC24F7-17CD-422A-B047-3E8B32D7B3F0 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1DB91262-2EF4-4F0D-8B61-0012BD25E7A8 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EACFFECA-179B-4911-85DE-D7270610E4A9 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3083C065-5A2C-4B2D-9C1F-5793BA3C0A52 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 47A9B2F1-D9C5-47F8-9B2D-7C2A1495972A (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 19588B3D-3F44-4127-8989-B535D4391201 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7557738A-5D93-4117-8FF2-9A27CD0E6BC5 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E1BC3034-8C33-4AAF-BE81-9BCFBF0EE56A (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 697BB742-0A55-4165-B5BD-5BDCD67B62CD (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 14599A66-17C9-4072-AA0D-EAE86DB496DD (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C66880A-FB33-477D-93FD-C280A4547D66 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CD3F898-5AB1-4E60-A086-ADCF33820154 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CC1F7CD2-7D13-48A9-A7CC-3547A1D241DB (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E4FED1D5-F31A-44C9-9101-D70486CC6FC7 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C24DE61-4036-42BF-A08F-67C234706703 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 03D9040F-1D1D-49E5-A60E-4393F5D76B60 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A76A792F-7026-4F29-9A00-3A2EAB2DE5FC (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 33DAF63F-C468-438C-97C3-B6CE8BD12858 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A82D4745-ACAB-4FC2-A63D-3B0FEA208BED (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FD80D674-1DD4-44E0-8C38-8341A7F392B1 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 10DD7029-9299-4901-A3D1-84D6102471B9 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7F73C59A-CDE2-4203-921F-1831D4ACFD2A (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C980129B-D717-47F7-A6C1-5EB64FB1BF9A (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B76C585C-FCC8-456D-A63C-7A769AF5EB07 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FC0C52E8-26B1-4F77-B9D3-D08BFF72DAFB (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9466279D-0582-464E-AFCC-20872CC99B56 (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 12EF0B24-689D-4BE8-98D5-D88A84D5E473 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B58299A7-7CA4-4EF8-81DC-9A41AA84FB2A (string)

vulnerable : false (boolean)

}

28 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AB218988-1483-4D96-9075-F79EDBC79974 (string)

vulnerable : false (boolean)

}

29 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F14D5A16-F7BE-427A-98AB-2E120DB756DC (string)

vulnerable : false (boolean)

}

30 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 82E128B2-A9B7-4A1C-9ACF-7EB323B72B6F (string)

vulnerable : false (boolean)

}

31 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BFC4A007-BEFD-4BF0-A176-7ECD6150041C (string)

vulnerable : false (boolean)

}

32 : { »

criteria : cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3B658454-C160-4EBA-9F7A-E2B9FDEA8A1E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP. (string)

}

1 : { »

lang : es (string)

value : Un atacante con acceso local al sistema puede realizar modificaciones no autorizadas en la configuración de seguridad de los registros SOC. Esto podría permitir una posible corrupción del contenido de la memoria cifrada del procesador seguro AMD, lo que podría provocar la ejecución de código arbitrario en ASP. (string)

}

]

id : CVE-2021-26360 (string)

lastModified : 2025-05-01T15:15:54.130 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2022-11-09T21:15:11.690 (string)

references : [ »

0 : { »

source : psirt@amd.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029 (string)

}

]

sourceIdentifier : psirt@amd.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "hw: amd: Unauthorized modifications of the security configuration of the SOC registers", "id": "2133519", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2133519"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "details": ["An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor\u2019s encrypted memory contents which may lead to arbitrary code execution in ASP.", "A flaw was found in hw. This flaw allows an attacker with local access to the system to make unauthorized modifications to the security configuration of the SOC registers. This issue could allow potential corruption of the AMD secure processor\u2019s encrypted memory contents, leading to arbitrary code execution in ASP."], "mitigation": {"lang": "en:us", "value": "Please contact AMD for more updates on this flaw."}, "name": "CVE-2021-26360", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2022-11-08T06:30:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-26360\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-26360\nhttps://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1029"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : hw: amd: Unauthorized modifications of the security configuration of the SOC registers (string)

id : 2133519 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2133519 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 6.4 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

status : draft (string)

}

details : [ »

0 : An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP. (string)

1 : A flaw was found in hw. This flaw allows an attacker with local access to the system to make unauthorized modifications to the security configuration of the SOC registers. This issue could allow potential corruption of the AMD secure processor’s encrypted memory contents, leading to arbitrary code execution in ASP. (string)

]

mitigation : { »

lang : en:us (string)

value : Please contact AMD for more updates on this flaw. (string)

}

name : CVE-2021-26360 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)