CVE-2021-26382

published 2022-07-14

CVE-2021-26382: An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective…

Priority P4 16 medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C N I N A H

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.

Affected

37 ranges · showing 25

Vendor	Product	Version range	Fixed in
amd	athlon_series	—	—
amd	ryzen_3_3200u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_3_3250u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_3_3300u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_3_5125c_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_3_5300g_firmware	< comboam4_v2_pi_1.2.0.6c	comboam4_v2_pi_1.2.0.6c
amd	ryzen_3_5300ge_firmware	< comboam4_v2_pi_1.2.0.6c	comboam4_v2_pi_1.2.0.6c
amd	ryzen_3_5400u_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_3_5425c_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_3_5425u_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_3500u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_5_3550h_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_5_3580u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_5_5560u_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_5600g_firmware	< comboam4_v2_pi_1.2.0.6c	comboam4_v2_pi_1.2.0.6c
amd	ryzen_5_5600ge_firmware	< comboam4_v2_pi_1.2.0.6c	comboam4_v2_pi_1.2.0.6c
amd	ryzen_5_5600h_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_5600hs_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_5600u_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_5625c_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_5_5625u_firmware	< cezannepi-fp6_1.0.0.9	cezannepi-fp6_1.0.0.9
amd	ryzen_7_3700u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_7_3750h_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_7_3780u_firmware	< renoirpi-fp6_1.0.0.7	renoirpi-fp6_1.0.0.7
amd	ryzen_7_5700g_firmware	< comboam4_v2_pi_1.2.0.6c	comboam4_v2_pi_1.2.0.6c

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.