CVE-2021-26368

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-12 · updated 2026-06-17
Weakness: CWE-345

Description

Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process resulting in a denial of service.

Affected products

AMD Ryzen 3 2200U Firmware: all versions
AMD Ryzen 3 2300U Firmware: all versions
AMD Ryzen 3 3100 Firmware: all versions
AMD Ryzen 3 3300G Firmware: all versions
AMD Ryzen 3 3300X Firmware: all versions
AMD Ryzen 3 5125C Firmware: all versions
AMD Ryzen 3 5400U Firmware: all versions
AMD Ryzen 3 5425C Firmware: all versions
AMD Ryzen 3 5425U Firmware: all versions
AMD Ryzen 5300G Firmware: all versions
AMD Ryzen 5300Ge Firmware: all versions
AMD Ryzen 5600G Firmware: all versions
AMD Ryzen 5600Ge Firmware: all versions
AMD Ryzen 5600X Firmware: all versions
AMD Ryzen 5700G Firmware: all versions
AMD Ryzen 5700Ge Firmware: all versions
AMD Ryzen 5800X3D Firmware: all versions
AMD Ryzen 5800X Firmware: all versions
AMD Ryzen 5900X Firmware: all versions
AMD Ryzen 5950X Firmware: all versions
AMD Ryzen 5 2500U Firmware: all versions
AMD Ryzen 5 2600 Firmware: all versions
AMD Ryzen 5 2600H Firmware: all versions
AMD Ryzen 5 2600X Firmware: all versions
AMD Ryzen 5 3400G Firmware: all versions
AMD Ryzen 5 3450G Firmware: all versions
AMD Ryzen 5 3600 Firmware: all versions
AMD Ryzen 5 3600X Firmware: all versions
AMD Ryzen 5 5560U Firmware: all versions
AMD Ryzen 5 5600H Firmware: all versions

References

Get alerted when CVE-2021-26368 or the next vulnerability affects your stack