CVE-2021-26333

CVE-2021-26333: AMD Chipset Driver Information Disclosure Vulnerability

Vendor Amd
Product PSP Driver
Weakness CWE-200 · Info exposure
Published September 21, 2021
Last update May 28, 2026

CVSS base score

What the vulnerability does

01Description

An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.

Key dates

02Disclosure timeline

September 21, 2021 CVE published
May 28, 2026 Record updated