An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Export limit exceeded: 425740 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2021-26382
CVSS 3.1 · 4.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2020-12931
hw: amd: Improper handling in the ASP kernel leading to loss of integrity
Improper parameters handling in the AMD Secure Processor (ASP) kernel may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2020-12930
hw: amd: Improper handling in ASP drivers leading to loss of integrity
Improper parameters handling in AMD Secure Processor (ASP) drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products