CVE-2021-26334

CRITICAL

AMD Prof < 3.4.494 - Privilege Escalation via AMDPowerProfiler.sys Driver

Title source: llm
STIX 2.1

Description

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

References (1)

Core 1
Core References
Mitigation, Vendor Advisory x_refsource_misc
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016

Scores

CVSS v3 9.9
EPSS 0.0051
EPSS Percentile 66.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-284
Status published
Products (1)
amd/amd_uprof < 3.4.494
Published Dec 01, 2021
Tracked Since Feb 18, 2026