CVE-2021-26391: AMD Enterprise Driver

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

Affected products

• AMD Enterprise Driver: before 22.10.20 (fixed in 22.10.20)
• AMD Radeon Pro Software: before 22.q2 (fixed in 22.q2)
• AMD Radeon Rx Vega 56 Firmware: affected versions not specified
• AMD Radeon Rx Vega 64 Firmware: affected versions not specified
• AMD Radeon Software: before 22.5.2 (fixed in 22.5.2)
• AMD Ryzen 3 5300g Firmware: affected versions not specified
• AMD Ryzen 3 5300ge Firmware: affected versions not specified
• AMD Ryzen 3 5300u Firmware: affected versions not specified
• AMD Ryzen 3 5400u Firmware: affected versions not specified
• AMD Ryzen 5 5500u Firmware: affected versions not specified
• AMD Ryzen 5 5560u Firmware: affected versions not specified
• AMD Ryzen 5 5600g Firmware: affected versions not specified
• AMD Ryzen 5 5600ge Firmware: affected versions not specified
• AMD Ryzen 5 5600h Firmware: affected versions not specified
• AMD Ryzen 5 5600hs Firmware: affected versions not specified
• AMD Ryzen 5 5600u Firmware: affected versions not specified
• AMD Ryzen 7 5700g Firmware: affected versions not specified
• AMD Ryzen 7 5700ge Firmware: affected versions not specified
• AMD Ryzen 7 5700u Firmware: affected versions not specified
• AMD Ryzen 7 5800h Firmware: affected versions not specified
• AMD Ryzen 7 5800hs Firmware: affected versions not specified
• AMD Ryzen 7 5800u Firmware: affected versions not specified
• AMD Ryzen 9 5900hs Firmware: affected versions not specified
• AMD Ryzen 9 5900hx Firmware: affected versions not specified
• AMD Ryzen 9 5980hs Firmware: affected versions not specified
• and 1 more

Published 2022-11-09. Last modified 2026-06-17.