CVE-2021-26410

Published Feb 10, 2026 CVSS 4.0 · 1.8 Low EPSS < 1% KEV · Not listed
Description
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Vendors & Products Amd
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd ryzen 5000 Series Desktop Processors
Amd ryzen 5000 Series Desktop Processors With Radeon Graphics
Amd ryzen 5000 Series Mobile Processors With Radeon Graphics
Amd ryzen 7030 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Amd ryzen Embedded V2000 Series Processors
Amd ryzen Embedded V3000 Series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.
Weaknesses CWE-822
References
Metrics cvssV4_0

{'score': 1.8, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}