Read the docs
TI-2021-08227 Aliases CVE-2021-26410GHSA-58jp-cg46-mwcw

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into…

Priority LOW 9CWE-822Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00162 5th percentileScored 2026-11-07
Fix Fixed AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (AMD): ComboAM4v2 PI 1.2.0.5+ iGPU Driver UpdateAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD): RenoirPI-FP6 1.0.0.8+15 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics—ComboAM4v2 PI 1.2.0.5+ iGPU Driver UpdatePatch availableCNA
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics—RenoirPI-FP6 1.0.0.8Patch availableCNA
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics—CezannePI-FP6 1.0.0.8Patch availableCNA
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics—CezannePI-FP6 1.0.0.8Patch availableCNA
AMDAMD Ryzen™ 4000 Series Desktop Processors—ComboAM4v2 PI 1.2.0.5Patch availableCNA
AMDAMD Ryzen™ Embedded R1000 Series Processors—EmbeddedPI-FP5_1.2.0.APatch availableCNA
AMDAMD Ryzen™ Embedded R2000 Series Processors—EmbeddedR2KPI-FP5_1.0.0.2Patch availableCNA
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")—EmbeddedPI-FP5_1.2.0.APatch availableCNA
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")—EmbeddedPI-FP5_1.2.0.APatch availableCNA
AMDAMD Ryzen™ Embedded V2000 Series Processors—EmbeddedPI-FP6_1.0.0.6Patch availableCNA
AMDAMD Ryzen™ Embedded V3000 Series Processors—EmbeddedPI-FP7r2_1.0.0.0Patch availableCNA
AMDAMD Radeon™ RX 5000 Series Graphics Products—AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)Patch availableCNA
AMDAMD Radeon™ PRO W5000 Series Graphics Products—AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)Patch availableCNA
AMDAMD Radeon™ RX 6000 Series Graphics Products—AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)Patch availableCNA
AMDAMD Radeon™ PRO W6000 Series Graphics Products—AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)Patch availableCNA
AMDAMD Radeon™ PRO V520—Contact your AMD Customer Engineering representativePatch availableCNA
AMDAMD Radeon™ PRO V620—Contact your AMD Customer Engineering representativePatch availableCNA
  • AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics VendorAMD Affected — Fixed in ComboAM4v2 PI 1.2.0.5+ iGPU Driver Update Patch available CNA
  • AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in RenoirPI-FP6 1.0.0.8 Patch available CNA
  • AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.8 Patch available CNA
  • AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics VendorAMD Affected — Fixed in CezannePI-FP6 1.0.0.8 Patch available CNA
  • AMD Ryzen™ 4000 Series Desktop Processors VendorAMD Affected — Fixed in ComboAM4v2 PI 1.2.0.5 Patch available CNA
  • AMD Ryzen™ Embedded R1000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP5_1.2.0.A Patch available CNA
  • AMD Ryzen™ Embedded R2000 Series Processors VendorAMD Affected — Fixed in EmbeddedR2KPI-FP5_1.0.0.2 Patch available CNA
  • AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") VendorAMD Affected — Fixed in EmbeddedPI-FP5_1.2.0.A Patch available CNA
  • AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") VendorAMD Affected — Fixed in EmbeddedPI-FP5_1.2.0.A Patch available CNA
  • AMD Ryzen™ Embedded V2000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP6_1.0.0.6 Patch available CNA
  • AMD Ryzen™ Embedded V3000 Series Processors VendorAMD Affected — Fixed in EmbeddedPI-FP7r2_1.0.0.0 Patch available CNA
  • AMD Radeon™ RX 5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) Patch available CNA
  • AMD Radeon™ PRO W5000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) Patch available CNA
  • AMD Radeon™ RX 6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) Patch available CNA
  • AMD Radeon™ PRO W6000 Series Graphics Products VendorAMD Affected — Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) Patch available CNA
  • AMD Radeon™ PRO V520 VendorAMD Affected — Fixed in Contact your AMD Customer Engineering representative Patch available CNA
  • AMD Radeon™ PRO V620 VendorAMD Affected — Fixed in Contact your AMD Customer Engineering representative Patch available CNA

Remediation

  • Fix · CNA AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics (AMD) Fixed in ComboAM4v2 PI 1.2.0.5+ iGPU Driver Update
  • Fix · CNA AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in RenoirPI-FP6 1.0.0.8
  • Fix · CNA AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.8
  • Fix · CNA AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics (AMD) Fixed in CezannePI-FP6 1.0.0.8
  • Fix · CNA AMD Ryzen™ 4000 Series Desktop Processors (AMD) Fixed in ComboAM4v2 PI 1.2.0.5
  • Fix · CNA AMD Ryzen™ Embedded R1000 Series Processors (AMD) Fixed in EmbeddedPI-FP5_1.2.0.A
  • Fix · CNA AMD Ryzen™ Embedded R2000 Series Processors (AMD) Fixed in EmbeddedR2KPI-FP5_1.0.0.2
  • Fix · CNA AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") (AMD) Fixed in EmbeddedPI-FP5_1.2.0.A
  • Fix · CNA AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") (AMD) Fixed in EmbeddedPI-FP5_1.2.0.A
  • Fix · CNA AMD Ryzen™ Embedded V2000 Series Processors (AMD) Fixed in EmbeddedPI-FP6_1.0.0.6
  • Fix · CNA AMD Ryzen™ Embedded V3000 Series Processors (AMD) Fixed in EmbeddedPI-FP7r2_1.0.0.0
  • Fix · CNA AMD Radeon™ RX 5000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
  • Fix · CNA AMD Radeon™ PRO W5000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
  • Fix · CNA AMD Radeon™ RX 6000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
  • Fix · CNA AMD Radeon™ PRO W6000 Series Graphics Products (AMD) Fixed in AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1)
  • Fix · CNA AMD Radeon™ PRO V520 (AMD) Fixed in Contact your AMD Customer Engineering representative
  • Fix · CNA AMD Radeon™ PRO V620 (AMD) Fixed in Contact your AMD Customer Engineering representative

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-26410
  2. 2026-10-03 Alias added: GHSA-58jp-cg46-mwcw

References

Other 2

  • TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
  • TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
  • TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
  • TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
  • TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
  • TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
See all 508 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences