Improper access control in AMD Radeon RX 6000 Series & PRO W6000 Series
Priority LOW 36CWE-284Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-284.
Summary
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00235 14th percentileScored 2026-11-07
Fix Fixed AMD Radeon RX 6000 Series & PRO W6000 Series (AMD): 22.5.2, 22.Q2, 22.10.20
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD Radeon RX 6000 Series & PRO W6000 Series | AMD Radeon Software to before 22.5.2; AMD Radeon Pro Software Enterprise to before 22.Q2; Enterprise Driver to before 22.10.20 | 22.5.2, 22.Q2, 22.10.20 | Patch available | CNA |
- AMD Radeon RX 6000 Series & PRO W6000 Series VendorAMD Affected AMD Radeon Software to before 22.5.2; AMD Radeon Pro Software Enterprise to before 22.Q2; Enterprise Driver to before 22.10.20 Fixed in 22.5.2, 22.Q2, 22.10.20 Patch available CNA
CPE configurations NVD · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:* | before 22.10.20 | Vulnerable | AMD |
| cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:* | before 22.q2 | Vulnerable | AMD |
| cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:* | before 22.5.2 | Vulnerable | AMD |
| cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:a:amd:enterprise_driver:*:*:*:*:*:*:*:* Versions before 22.10.20 Vulnerable ·AMD
- cpe:2.3:a:amd:radeon_pro_software:*:*:*:*:enterprise:*:*:* Versions before 22.q2 Vulnerable ·AMD
- cpe:2.3:a:amd:radeon_software:*:*:*:*:*:*:*:* Versions before 22.5.2 Vulnerable ·AMD
- cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6300m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6500m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6600s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6650m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6750_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6800s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6850m_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6900_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:h:amd:radeon_rx_6950_xt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Remediation
- Fix · CNA AMD Radeon RX 6000 Series & PRO W6000 Series (AMD) Fixed in 22.5.2, 22.Q2, 22.10.20
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
AMD Radeon RX 6000 Series & PRO W6000 Series 22.10.20, 22.5.2, 22.Q2
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2021-08212 Improper signature verification in AMD Radeon RX 5000 Series & PRO W5000 SeriesPriority LOW 35
- TI-2021-08213 Out-of-bounds write in AMD Radeon RX 5000 Series & PRO W5000 SeriesPriority LOW 34
- TI-2021-08214 Memory leak in AMD Radeon RX 5000 Series & PRO W5000 SeriesPriority LOW 25
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 4 products
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
Timeline
- 2026-10-02 Threatist record created from CVE-2021-26360
- 2026-10-03 Alias added: GHSA-5v6h-fqxx-8wv5
References
More AMD Enterprise Driver vulnerabilities
- TI-2021-08212 Improper signature verification in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
- TI-2021-08213 Out-of-bounds write in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1HIGH 7.8
- TI-2020-10274 Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a… CVSS 3.1HIGH 7.8
- TI-2020-10273 Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged… CVSS 3.1HIGH 7.8
- TI-2021-08214 Memory leak in AMD Radeon RX 5000 Series & PRO W5000 Series CVSS 3.1MEDIUM 5.5
Sources
- CVE-2021-26360 · CVE Program
- CVE-2021-26360 · NVD
- FIRST EPSS
- GHSA-5v6h-fqxx-8wv5 · GitHub Advisory Database · CC BY 4.0
- CVE-2021-26360 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences