CVE-2021-26333

MEDIO 5.5CVE-2021-26333 · Published 21/09/2021 · updated 17/06/2026

En resumen

CVE-2021-26333 es una vulnerabilidad MEDIO (CVSS 5.5) que afecta a chipset driver (amd), psp driver (amd).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.52%, mayor que el 44.0% de las vulnerabilidades.
Solución: actualizar a 3.08.17.735, 5.17.0.0 o posterior.

Package	Affected versions	Patched versions
chipset driver amd	`< 3.08.17.735`	`3.08.17.735`
psp driver amd	`< 5.17.0.0`	`5.17.0.0`

Description

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.

References

packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html · Third Party Advisory
seclists.org/fulldisclosure/2021/Sep/24 · Mailing List
amd.com/en/corporate/product-security/bulletin/amd-sb-1009 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free