Low severity · published Feb 10, 2026
CVE-2021-26410
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer…
1.8
CVSS
0.2%
EPSS
No
On KEV
Description
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
AMD Radeon™ PRO V520 · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ PRO V620 · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ PRO W5000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ PRO W6000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ RX 5000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
AR
AMD Radeon™ RX 6000 Series Graphics Products · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 4000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ Embedded R1000 Series Processors · AMD
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-26410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-26410
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html
More from AMD Radeon™ PRO V520
8.8
CVE-2024-36324
Improper input validation in AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution
7.1
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management…
7.1
CVE-2021-26381
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially…
6.8
CVE-2023-31309
Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data from SMU to DRAM…
5.5
CVE-2024-36316
The integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass size checks potentially resulting in a denial of service