AMD Graphics Driver Vulnerability Summary: CVE-2020-12930/12931/2021-26391-26393 Analysis and Patch Guidance

AMD Graphics Driver Vulnerability Summary (November 2022) Vulnerability Overview AMD has received reports indicating that certain AMD graphics products contain potential vulnerabilities. These primarily involve improper parameter handling in the AMD Secure Processor (ASP) driver and kernel, which could allow a privileged attacker to escalate privileges or lead to a loss of integrity or confidentiality. Key CVE List: CVE-2020-12930 (High): Improperly handled parameters in the ASP driver could allow a privileged attacker to escalate privileges, leading to a loss of integrity. CVE-2020-12931 (High): Improperly handled parameters in the ASP kernel could allow a privileged attacker to escalate privileges, leading to a loss of integrity. CVE-2021-26391 (Medium): Insufficient header signature verification when loading Trusted Applications (TA) could allow an attacker to gain code execution privileges in the TA or OS kernel. CVE-2021-26392 (Medium): Missing boundary checks in could lead to an out-of-bounds write, allowing an attacker to gain code execution privileges in the OS kernel by loading a malicious TA. CVE-2021-26393 (Medium): Insufficient memory clearing in the ASP Trusted Execution Environment (TEE) could allow an authenticated attacker to generate a valid TA and poison process memory, leading to a loss of confidentiality. Affected Products Affected products include graphics cards, client APUs, and CPUs. 1. Graphics Cards AMD Radeon™ RX 5000 Series and AMD Radeon™ PRO W5000 Series: Affected CVEs include CVE-2020-12930, CVE-2020-12931, CVE-2021-26391, CVE-2021-26392, CVE-2021-26393. AMD Radeon™ RX 6000 Series and AMD Radeon™ PRO W6000 Series: Affected CVEs include CVE-2021-26360, CVE-2021-26391, CVE-2021-26392, CVE-2021-26393. AMD Radeon™ RX Vega Series: Affected CVEs include CVE-2020-12930, CVE-2021-26391, CVE-2021-26392, CVE-2021-26393. 2. Client APUs and CPUs Desktop: Involves Ryzen 2000, 3000, and 5000 Series desktop processors (e.g., "Raven Ridge", "Matisse", "Vermeer", "Cezanne"). High End Desktop (HEDT): Involves 2nd Gen and 3rd Gen AMD Ryzen Threadripper processors (e.g., "Colfax", "Castle Peak"). Workstation: Involves AMD Ryzen Threadripper PRO processors (e.g., "Castle Peak", "Chagall"). Mobile: AMD Athlon 3000 Series mobile processors (e.g., "Dali", "Pollock"). AMD Ryzen 2000, 3000, 4000, and 5000 Series mobile processors (e.g., "Raven Ridge", "Picasso", "Renoir", "Lucienne", "Cezanne"). Remediation AMD recommends updating the AMD Graphics Driver to the recommended version for your product. Please refer to your Original Equipment Manufacturer (OEM) for specific BIOS updates for your product. Specific Driver Version Requirements (Partial Examples): RX 5000/W5000 Series: AMD Radeon Software v. 22.5.2, AMD Radeon Pro Software for Enterprise v. 22.Q2, Enterprise Driver v. 22.10.20. RX 6000/W6000 Series: AMD Radeon Software v. 22.5.2, AMD Radeon Pro Software for Enterprise v. 22.Q2, Enterprise Driver v. 22.10.20. Desktop Ryzen Processors: Require updates to specific ComboAM4PI or ComboAM4v2 versions (e.g., ComboAM4PI 1.0.0.9, ComboAM4v2 PI 1.2.0.8, etc., depending on CPU model and CVE). Mobile Ryzen Processors: Require updates to specific RenoirPI-FP6, CezannePI-FP6, PicassoPI-FPS versions (e.g., RenoirPI-FP6 1.0.0.7, CezannePI-FP6 1.0.0.9, etc., depending on CPU model and CVE). Note: There are currently no plans to provide fixes for AMD Radeon™ RX Vega Series graphics cards. Proof of Concept / Exploit Code No Proof of Concept (PoC) code or exploit code is included in this document.

Goal Reached Thanks to every supporter — we hit 100%!

AMD Graphics Driver Vulnerability Summary: CVE-2020-12930/12931/2021-26391-26393 Analysis and Patch Guidance