CVE-2021-26333

MEDIUM 5.5CVE-2021-26333 · Published 21/09/2021 · updated 17/06/2026

In short

CVE-2021-26333 is a MEDIUM (CVSS 5.5) vulnerability affecting chipset driver (amd), psp driver (amd).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.0% of all vulnerabilities.
Fix: update to 3.08.17.735, 5.17.0.0 or later.

Package	Affected versions	Patched versions
chipset driver amd	`< 3.08.17.735`	`3.08.17.735`
psp driver amd	`< 5.17.0.0`	`5.17.0.0`

Description

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.

References

packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html · Third Party Advisory
seclists.org/fulldisclosure/2021/Sep/24 · Mailing List
amd.com/en/corporate/product-security/bulletin/amd-sb-1009 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free