Description (CNA)
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AMD / AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics | unaffected ComboAM4v2 PI 1.2.0.5+ iGPU Driver Update |
| AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | unaffected RenoirPI-FP6 1.0.0.8 |
| AMD / AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.8 |
| AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | unaffected CezannePI-FP6 1.0.0.8 |
| AMD / AMD Ryzen™ 4000 Series Desktop Processors | unaffected ComboAM4v2 PI 1.2.0.5 |
| AMD / AMD Ryzen™ Embedded R1000 Series Processors | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD / AMD Ryzen™ Embedded R2000 Series Processors | unaffected EmbeddedR2KPI-FP5_1.0.0.2 |
| AMD / AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD / AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") | unaffected EmbeddedPI-FP5_1.2.0.A |
| AMD / AMD Ryzen™ Embedded V2000 Series Processors | unaffected EmbeddedPI-FP6_1.0.0.6 |
| AMD / AMD Ryzen™ Embedded V3000 Series Processors | unaffected EmbeddedPI-FP7r2_1.0.0.0 |
| AMD / AMD Radeon™ RX 5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD / AMD Radeon™ PRO W5000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD / AMD Radeon™ RX 6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD / AMD Radeon™ PRO W6000 Series Graphics Products | unaffected AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10), Radeon Software For Linux (25.10.1) |
| AMD / AMD Radeon™ PRO V520 | unaffected Contact your AMD Customer Engineering representative |
| AMD / AMD Radeon™ PRO V620 | unaffected Contact your AMD Customer Engineering representative |
CWE
CWE-822
References
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html
- https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html
ADP enrichment
No English description supplied.
No references supplied.