1.8 Low

CVE-2021-26410 Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter…

Description

Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.

Affected products and versions

Product	Affected versions	Fixed in
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Versions not published
AMD Ryzen™ 4000 Series Desktop Processors	Versions not published
AMD Ryzen™ Embedded R1000 Series Processors	Versions not published
AMD Ryzen™ Embedded R2000 Series Processors	Versions not published
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Versions not published
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	Versions not published

Show the 8 other branches

Product	Affected versions	Fixed in
AMD Ryzen™ Embedded V2000 Series Processors	Versions not published
AMD Ryzen™ Embedded V3000 Series Processors	Versions not published
AMD Radeon™ RX 5000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W5000 Series Graphics Products	Versions not published
AMD Radeon™ RX 6000 Series Graphics Products	Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products	Versions not published
AMD Radeon™ PRO V520	Versions not published
AMD Radeon™ PRO V620	Versions not published

References

www.amd.com www.amd.com
www.amd.com www.amd.com

Timeline

Published February 10, 2026
Last modified February 12, 2026

The 31 CVEs of AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics →

CVE-2026-43603 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of… 6.9 Medium CVE-2023-20577 A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI… 7.4 High CVE-2023-20576 Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially… 7.7 High CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High

Track this CVE