CVE-2021-26381

Published Feb 10, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Description
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Vendors & Products Amd
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded 5000 Series Processors
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Amd ryzen Threadripper Pro 3000 Wx-series Processors
Amd ryzen Threadripper Pro 5000 Wx-series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.
Weaknesses CWE-770
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}