CVE-2021-26382
An attacker with root account privileges can load any legitimately signed firmware image into the...
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
- Record
CVE-2021-26382- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
CVE List No score
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
- Record
CVE-2021-26382- Updated
- 2026-11-02
EUVDEUVD-2021-13188 No score
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
- Record
EUVD-2021-13188- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w6fw-9866-83f5
An attacker with root account privileges can load any legitimately signed firmware image into the...
An attacker with root account privileges can load any legitimately signed firmware image into the Audio Co-Processor (ACP,) irrespective of the respective signing key being declared as usable for authenticating an ACP firmware image, potentially resulting in a denial of service.
- Record
GHSA-w6fw-9866-83f5- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
- amd athlon™ series
- amd ryzen 3 3200u firmware
- amd ryzen 3 3250u firmware
- amd ryzen 3 3300u firmware
- amd ryzen 3 5125c firmware
- amd ryzen 3 5300g firmware
- amd ryzen 3 5300ge firmware
- amd ryzen 3 5400u firmware
- amd ryzen 3 5425c firmware
- amd ryzen 3 5425u firmware
- amd ryzen 5 3500u firmware
- amd ryzen 5 3550h firmware
Show 25 moreShow less
- amd ryzen 5 3580u firmware
- amd ryzen 5 5560u firmware
- amd ryzen 5 5600g firmware
- amd ryzen 5 5600ge firmware
- amd ryzen 5 5600h firmware
- amd ryzen 5 5600hs firmware
- amd ryzen 5 5600u firmware
- amd ryzen 5 5625c firmware
- amd ryzen 5 5625u firmware
- amd ryzen 7 3700u firmware
- amd ryzen 7 3750h firmware
- amd ryzen 7 3780u firmware
- amd ryzen 7 5700g firmware
- amd ryzen 7 5700ge firmware
- amd ryzen 7 5800h firmware
- amd ryzen 7 5800hs firmware
- amd ryzen 7 5800u firmware
- amd ryzen 7 5825c firmware
- amd ryzen 7 5825u firmware
- amd ryzen 7 pro 3700u firmware
- amd ryzen 9 5900hs firmware
- amd ryzen 9 5900hx firmware
- amd ryzen 9 5980hs firmware
- amd ryzen 9 5980hx firmware
- amd ryzen™ series
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-26382 is a medium vulnerability (CVSS 4.4) in Amd Athlon™ Series, published July 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. No source names a fixed version.