CVE-2021-26392
hw: amd: Insufficient verification in 'LoadModule' may lead to an out-of-bounds write
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · November 8, 2022
Updated · November 22, 2025
Description
A flaw was found in hw. Insufficient verification of missing size checks in the 'LoadModule' may lead to an out-of-bounds write, potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious Trusted Application (TA).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Please contact AMD for more updates on this flaw.
CVSS / CWE
CVSS 3.1 · 6.4CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-787 · Out-of-bounds Write