CVE-2021-26381

Severity: high (CVSS 7.1 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-10 · updated 2026-06-17
Weakness: CWE-770

Description

Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.

Affected products

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Radeon™ PRO V520: all versions
AMD Radeon™ PRO V620: all versions
AMD Radeon™ PRO W5000 Series Graphics Products: all versions
AMD Radeon™ PRO W6000 Series Graphics Products: all versions
AMD Radeon™ RX 5000 Series Graphics Products: all versions
AMD Radeon™ RX 6000 Series Graphics Products: all versions
AMD Ryzen™ 3000 Series Desktop Processors: all versions
AMD Ryzen™ 4000 Series Desktop Processors: all versions
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 5000 Series Desktop Processors: all versions
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: all versions
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: all versions
AMD Ryzen™ Embedded 5000 Series Processors: all versions
AMD Ryzen™ Embedded R1000 Series Processors: all versions
AMD Ryzen™ Embedded R2000 Series Processors: all versions
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"): all versions
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"): all versions
AMD Ryzen™ Embedded V2000 Series Processors: all versions
AMD Ryzen™ Embedded V3000 Series Processors: all versions
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors: all versions
AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors: all versions

References

Get alerted when CVE-2021-26381 or the next vulnerability affects your stack