CVE-2021-26381

EUVD-2021-13187 · Published Feb 10, 2026

Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption.

Weaknesses

CWE-770

CVSS scores

v4.07.1CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation Impact

T1068Exploitation for Privilege Escalation T1498.001Direct Network Flood T1498.002Reflection Amplification T1499Endpoint Denial of Service T1499.001OS Exhaustion Flood T1499.002Service Exhaustion Flood T1499.003Application Exhaustion Flood

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4013.html
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html

Potentially impacted assets

See if this affects your attack surface

CVE-2021-26381

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts