Vulnerability Details CVE-2021-26333
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.9
References
- http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html
- http://seclists.org/fulldisclosure/2021/Sep/24
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009
- http://packetstormsecurity.com/files/164202/AMD-Chipset-Driver-Information-Disclosure-Memory-Leak.html
- http://seclists.org/fulldisclosure/2021/Sep/24
- https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1009
Products affected by CVE-2021-26333
-
cpe:2.3:a:amd:chipset_driver:-
-
cpe:2.3:a:amd:psp_driver:-