CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability

2021-09-2110:49:49

CWE-200

AMD

www.cve.org

amd

chipset

driver

information

disclosure

vulnerability

platform security processor

discretionary access control list

low privileged users

data leak

uninitialized physical pages

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.2%

JSON

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.

CNA Affected

[
  {
    "product": "PSP Driver",
    "vendor": "AMD",
    "versions": [
      {
        "lessThan": "5.17.0.0",
        "status": "affected",
        "version": "PSP Driver",
        "versionType": "custom"
      }
    ]
  }
]