CVE-2021-26391

HIGH
7.8
CVSS Score
Published: November 9, 2022 at 08:44 PM UTC
Updated: June 17, 2026 at 03:43 AM UTC
101 products affected across 1 vendorRadeon SoftwareRyzen 5 5600U FirmwareRyzen 5 5600HS Firmware

Using AMD Radeon RX 5000 Series & PRO W5000 Series by AMD?

Get instant alerts when new vulnerabilities affect AMD Radeon RX 5000 Series & PRO W5000 Series - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 22.10.20
Affected range stops below 22.10.20, so it looks safe — our inference, not a vendor statement
amd-radeon-pro-w5500 (same device) · amd-radeon-pro-w5500x (same device) · amd-radeon-pro-w5700 (same device) · amd-radeon-pro-w5700x (same device) · amd-radeon-pro-w6300m (same device) · amd-radeon-pro-w6400 (same device) · amd-radeon-pro-w6500m (same device) · amd-radeon-pro-w6600 (same device) · amd-radeon-pro-w6600m (same device) · amd-radeon-pro-w6600x (same device) · amd-radeon-pro-w6800 (same device) · amd-radeon-pro-w6800x (same device) · amd-radeon-pro-w6800x-duo (same device) · amd-radeon-pro-w6900x (same device) · amd-radeon-rx-5300 (same device) · amd-radeon-rx-5300-xt (same device) · amd-radeon-rx-5300m (same device) · amd-radeon-rx-5500 (same device) · amd-radeon-rx-5500-xt (same device) · amd-radeon-rx-5500m (same device) · amd-radeon-rx-5600 (same device) · amd-radeon-rx-5600-xt (same device) · amd-radeon-rx-5600m (same device) · amd-radeon-rx-5700 (same device) · amd-radeon-rx-5700-xt (same device) · amd-radeon-rx-5700m (same device) · amd-radeon-rx-6300m (same device) · amd-radeon-rx-6400 (same device) · amd-radeon-rx-6500-xt (same device) · amd-radeon-rx-6500m (same device) · amd-radeon-rx-6600 (same device) · amd-radeon-rx-6600-xt (same device) · amd-radeon-rx-6600m (same device) · amd-radeon-rx-6600s (same device) · amd-radeon-rx-6650-xt (same device) · amd-radeon-rx-6650m (same device) · amd-radeon-rx-6650m-xt (same device) · amd-radeon-rx-6700 (same device) · amd-radeon-rx-6700-xt (same device) · amd-radeon-rx-6700m (same device) · amd-radeon-rx-6700s (same device) · amd-radeon-rx-6750-xt (same device) · amd-radeon-rx-6800 (same device) · amd-radeon-rx-6800-xt (same device) · amd-radeon-rx-6800m (same device) · amd-radeon-rx-6800s (same device) · amd-radeon-rx-6850m-xt (same device) · amd-radeon-rx-6900-xt (same device) · amd-radeon-rx-6950-xt (same device)
v < 22.q2
Affected range stops below 22.q2, so it looks safe — our inference, not a vendor statement
amd-radeon-pro-w5500 (same device) · amd-radeon-pro-w5500x (same device) · amd-radeon-pro-w5700 (same device) · amd-radeon-pro-w5700x (same device) · amd-radeon-pro-w6300m (same device) · amd-radeon-pro-w6400 (same device) · amd-radeon-pro-w6500m (same device) · amd-radeon-pro-w6600 (same device) · amd-radeon-pro-w6600m (same device) · amd-radeon-pro-w6600x (same device) · amd-radeon-pro-w6800 (same device) · amd-radeon-pro-w6800x (same device) · amd-radeon-pro-w6800x-duo (same device) · amd-radeon-pro-w6900x (same device) · amd-radeon-rx-5300 (same device) · amd-radeon-rx-5300-xt (same device) · amd-radeon-rx-5300m (same device) · amd-radeon-rx-5500 (same device) · amd-radeon-rx-5500-xt (same device) · amd-radeon-rx-5500m (same device) · amd-radeon-rx-5600 (same device) · amd-radeon-rx-5600-xt (same device) · amd-radeon-rx-5600m (same device) · amd-radeon-rx-5700 (same device) · amd-radeon-rx-5700-xt (same device) · amd-radeon-rx-5700m (same device) · amd-radeon-rx-6300m (same device) · amd-radeon-rx-6400 (same device) · amd-radeon-rx-6500-xt (same device) · amd-radeon-rx-6500m (same device) · amd-radeon-rx-6600 (same device) · amd-radeon-rx-6600-xt (same device) · amd-radeon-rx-6600m (same device) · amd-radeon-rx-6600s (same device) · amd-radeon-rx-6650-xt (same device) · amd-radeon-rx-6650m (same device) · amd-radeon-rx-6650m-xt (same device) · amd-radeon-rx-6700 (same device) · amd-radeon-rx-6700-xt (same device) · amd-radeon-rx-6700m (same device) · amd-radeon-rx-6700s (same device) · amd-radeon-rx-6750-xt (same device) · amd-radeon-rx-6800 (same device) · amd-radeon-rx-6800-xt (same device) · amd-radeon-rx-6800m (same device) · amd-radeon-rx-6800s (same device) · amd-radeon-rx-6850m-xt (same device) · amd-radeon-rx-6900-xt (same device) · amd-radeon-rx-6950-xt (same device)
All versions
amd-radeon-rx-vega-56 (same device)
All versions
amd-radeon-rx-vega-64 (same device)
v < 22.5.2
Affected range stops below 22.5.2, so it looks safe — our inference, not a vendor statement
amd-radeon-pro-w5500 (same device) · amd-radeon-pro-w5500x (same device) · amd-radeon-pro-w5700 (same device) · amd-radeon-pro-w5700x (same device) · amd-radeon-pro-w6300m (same device) · amd-radeon-pro-w6400 (same device) · amd-radeon-pro-w6500m (same device) · amd-radeon-pro-w6600 (same device) · amd-radeon-pro-w6600m (same device) · amd-radeon-pro-w6600x (same device) · amd-radeon-pro-w6800 (same device) · amd-radeon-pro-w6800x (same device) · amd-radeon-pro-w6800x-duo (same device) · amd-radeon-pro-w6900x (same device) · amd-radeon-rx-5300 (same device) · amd-radeon-rx-5300-xt (same device) · amd-radeon-rx-5300m (same device) · amd-radeon-rx-5500 (same device) · amd-radeon-rx-5500-xt (same device) · amd-radeon-rx-5500m (same device) · amd-radeon-rx-5600 (same device) · amd-radeon-rx-5600-xt (same device) · amd-radeon-rx-5600m (same device) · amd-radeon-rx-5700 (same device) · amd-radeon-rx-5700-xt (same device) · amd-radeon-rx-5700m (same device) · amd-radeon-rx-6300m (same device) · amd-radeon-rx-6400 (same device) · amd-radeon-rx-6500-xt (same device) · amd-radeon-rx-6500m (same device) · amd-radeon-rx-6600 (same device) · amd-radeon-rx-6600-xt (same device) · amd-radeon-rx-6600m (same device) · amd-radeon-rx-6600s (same device) · amd-radeon-rx-6650-xt (same device) · amd-radeon-rx-6650m (same device) · amd-radeon-rx-6650m-xt (same device) · amd-radeon-rx-6700 (same device) · amd-radeon-rx-6700-xt (same device) · amd-radeon-rx-6700m (same device) · amd-radeon-rx-6700s (same device) · amd-radeon-rx-6750-xt (same device) · amd-radeon-rx-6800 (same device) · amd-radeon-rx-6800-xt (same device) · amd-radeon-rx-6800m (same device) · amd-radeon-rx-6800s (same device) · amd-radeon-rx-6850m-xt (same device) · amd-radeon-rx-6900-xt (same device) · amd-radeon-rx-6950-xt (same device)
All versions
All versions
amd-ryzen-3-5300ge (same device)
All versions
amd-ryzen-3-5300u (same device)
All versions
amd-ryzen-3-5400u (same device)
All versions
amd-ryzen-5-5500u (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGHCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfoCWE-347

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card