CVE-2021-26382

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-14 · updated 2026-06-17

Description

An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.

Affected products

AMD Ryzen 3 3200U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 3 3250U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 3 3300U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 3 5125C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5300G Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5300Ge Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 3 5400U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 3 5425U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 3500U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 5 3550H Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 5 3580U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 5 5560U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600G Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 5 5600Ge Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 5 5600H Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600Hs Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5600U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5625C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 5 5625U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 7 3700U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 7 3750H Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 7 3780U Firmware: before renoirpi-fp6_1.0.0.7 — fixed in renoirpi-fp6_1.0.0.7
AMD Ryzen 7 5700G Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 7 5700Ge Firmware: before comboam4_v2_pi_1.2.0.6c — fixed in comboam4_v2_pi_1.2.0.6c
AMD Ryzen 7 5800H Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5800Hs Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5800U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5825C Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9
AMD Ryzen 7 5825U Firmware: before cezannepi-fp6_1.0.0.9 — fixed in cezannepi-fp6_1.0.0.9

How to fix

Upgrade to a fixed version: AMD Ryzen 3 3200U Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 3 3250U Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 3 3300U Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 3 5125C Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5300G Firmware comboam4_v2_pi_1.2.0.6c; AMD Ryzen 3 5300Ge Firmware comboam4_v2_pi_1.2.0.6c; AMD Ryzen 3 5400U Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5425C Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 3 5425U Firmware cezannepi-fp6_1.0.0.9; AMD Ryzen 5 3500U Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 5 3550H Firmware renoirpi-fp6_1.0.0.7; AMD Ryzen 5 3580U Firmware renoirpi-fp6_1.0.0.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-26382 or the next vulnerability affects your stack