PT-2022-9742 · Unknown · Trusted Os

Published 2022-05-12 · Updated 2022-06-01 · CVE-2021-26368

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Trusted OS (TOS) (affected versions not specified)

Description The issue is related to an insufficient check of the process type in Trusted OS (TOS), which may allow an attacker with privileges to enable a lesser privileged process to unmap memory owned by a higher privileged process, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2021-26368

Affected Products

Trusted Os

References · 3

• https://amd.com/en/corporate/product-security/bulletin/amd-sb-1027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-26368 · Security Note
• https://t.me/cibsecurity/42547 · Telegram Post