CVE-2021-26393 : Security Advisory and Response

AMD Secure Processor (ASP) Trusted Execution Environment (TEE) in AMD Radeon RX 5000 Series & PRO W5000 Series, AMD Radeon RX 6000 Series & PRO W6000 Series is affected by an insufficient memory cleanup vulnerability. An authenticated attacker could exploit this to compromise data confidentiality.

Understanding CVE-2021-26393

This CVE involves an issue in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) that could lead to a breach in data confidentiality.

What is CVE-2021-26393?

The vulnerability arises due to insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE). An attacker with authentication privileges could manipulate the process memory, potentially compromising data confidentiality.

The Impact of CVE-2021-26393

The impact of this vulnerability is significant as it enables an attacker to introduce unauthorized data into the trusted execution environment, leading to a breach in data confidentiality.

Technical Details of CVE-2021-26393

This section discusses the specifics of the vulnerability.

Vulnerability Description

The vulnerability allows an authenticated attacker to generate a valid signed Trusted Application (TA) and insert attacker-controlled data into process memory, jeopardizing data confidentiality.

Affected Systems and Versions

AMD Radeon RX 5000 Series & PRO W5000 Series: Versions less than AMD Radeon Software 22.5.2, AMD Radeon Pro Software Enterprise 22.Q2, and Enterprise Driver 22.10.20 are affected.
AMD Radeon RX 6000 Series & PRO W6000 Series: Versions less than AMD Radeon Software 22.5.2, AMD Radeon Pro Software Enterprise 22.Q2, and Enterprise Driver 22.10.20 are affected.

Exploitation Mechanism

The exploitation involves an authenticated attacker with privileges manipulating the memory contents to compromise data confidentiality.

Mitigation and Prevention

Protecting against CVE-2021-26393 is crucial to safeguard systems.

Immediate Steps to Take

Apply patches from AMD as soon as they are released to mitigate the vulnerability.
Monitor system activity for any signs of unauthorized access.

Long-Term Security Practices

Regularly update software and firmware to stay protected against known vulnerabilities.
Implement least privilege access to limit the impact of potential breaches.

Patching and Updates

Stay informed about security updates from AMD and apply them promptly to ensure system security.