Lenovo update for AMD HIP SDK

1) Incorrect default permissions

EUVDB-ID: #VU100428

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-21937

CWE-ID: CWE-276 - Incorrect Default Permissions

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions in the AMD HIP SDK installation directory. A local user can execute arbitrary code on the system with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

AMD Graphics Driver for Windows 11 (Version 24H2) and 10 (Version 22H2) - ThinkStation P8: All versions

AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel: All versions

AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620: All versions

AMD Discrete Graphics Driver for RX7600 for Windows 10 (Version 22H2) - ThinkStation P520c: All versions

AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5: All versions

AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P360: All versions

AMD Discrete Graphics Driver for W6400 for Windows 11 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra: All versions

AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra: All versions

AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358: All versions

AMD IO Driver for Windows 11 (Version 22H2 or later) - ThinkPad P15v Gen 3 (Type 21EM, 21EN): All versions

AMD IO Driver for Windows 11 (Version 21H2), 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM): All versions

AMD IO Driver for Windows 11 (Version 21H2) - ThinkPad P15v Gen 3 (Type 21EM, 21EN): All versions

AMD Graphics Driver Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM): All versions

AMD Graphics Driver for Windows 11 (Version 21H2) - ThinkPad P15v Gen 3 (Type 21EM, 21EN): All versions

AMD Graphics Driver for Windows 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM): All versions

LOQ 15AHP9: All versions

Legion Slim 5 16AHP9: All versions

ThinkBook 16 G7 ARP: All versions

ThinkBook 14 G7 ARP: All versions

ThinkStation P8 Workstation: All versions

ThinkStation P358 Workstation: All versions

ThinkPad Z16 Gen 2 21JY: All versions

ThinkPad Z16 Gen 2 21JX: All versions

ThinkPad Z13 Gen 2 21JW: All versions

ThinkPad Z13 Gen 2 21JV: All versions

ThinkBook 16 G6 ABP: All versions

ThinkBook 14 G6 ABP: All versions

Lenovo 13w Yoga Gen 2 82YS: All versions

Lenovo 13w Yoga Gen 2 82YR: All versions

Lenovo 13w Yoga 82S2: All versions

Lenovo 13w Yoga 82S1: All versions

ThinkCentre M75n: All versions

ThinkStation P620 Workstation: All versions

ThinkPad T16 Gen 2 21K8: All versions

ThinkPad T16 Gen 2 21K7: All versions

ThinkPad T14s Gen 4 21F9: All versions

ThinkPad T14s Gen 4 21F8: All versions

ThinkPad T14 Gen 4 21K4: All versions

ThinkPad T14 Gen 4 21K3: All versions

ThinkPad P16v Gen 1 21FF: All versions

ThinkPad P16v Gen 1 21FE: All versions

ThinkPad P16s Gen 2 21KA: All versions

ThinkPad P16s Gen 2 21K9: All versions

ThinkPad P15v Gen 3 21EM: All versions

ThinkPad P15v Gen 3 21EN: All versions

ThinkPad P14s Gen 4 21K6: All versions

ThinkPad P14s Gen 4 21K5: All versions

ThinkStation P360 Ultra Workstation: All versions

ThinkStation P7 Intel Workstation: All versions

ThinkStation P5 Workstation: All versions

ThinkStation P520c Workstation: All versions

ThinkStation P360 Workstation: All versions

AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2: before 2.2.0.134

AMD IO Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2: before 2.2.0.134

AMD Graphics Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2: before 32.0.11030.8001

AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF): before 2.2.0.134

AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF): before 2.2.0.134

AMD Graphics Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF): before 32.0.11030.7006

AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF): before 32.0.11030.7006

AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad: before 2.2.0.134

AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G7 ARP, ThinkBook 16 G7 ARP: before 32.0.11022.4

AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 16 G6 ABP: before 31.0.21914.6001

AMD VGA Driver for Windows 10 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 14 G6 ABP: before 31.0.21914.6001

AMD VGA Driver for Windows 11 (64-bit) - LOQ 15AHP9: before 32.0.11002.9001

AMD VGA Driver for Windows 11 (64-bit) - Legion Slim 5 16AHP9: before 32.0.11002.9001

AMD Graphics Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS): before 31.0.21918.2005

AMD Graphics Driver for Windows 10 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2: before 31.0.21918.2005

AMD Graphics Driver for Windows 11 (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2): before 31.0.21918.2005

AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2): before 31.0.21918.2005

AMD Graphics Driver for Windows 10 IOT (64-bit) - ThinkCentre M75n: before 31.0.12018.16003

AMD Graphics Driver for Windows 10 64-bit (Version 1909 or later) - ThinkCentre M75n: before 31.0.12018.16003

CPE2.3

• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_11_version_24h2_and_10_version_22h2_-_thinkstation_p8:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_windows_10_version_21h2_11_version_21h2_22h2_-_thinkstation_p7_intel:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_vga_driver_for_windows_11_version_22h2_-_thinkstation_p620:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_rx7600_for_windows_10_version_22h2_-_thinkstation_p520c:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_windows_10_version_21h2_11_version_21h2_22h2_-_thinkstation_p5:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_windows_11_version_21h2_or_later_-_thinkstation_p360:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_w6400_for_windows_11_version_21h2_22h2_or_later_-_thinkstation_p360_ultra:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_w6400_for_windows_10_version_21h2_22h2_or_later_-_thinkstation_p360_ultra:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_discrete_graphics_driver_for_windows_11_version_22h2_or_later_10_version_22h2_-_thinkstation_p358:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_11_version_22h2_or_later_-_thinkpad_p15v_gen_3_type_21em_21en:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_11_version_21h2_10_version_20h2_or_later_-_thinkpad_p15v_gen_3_type_21en_21em:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_11_version_21h2_-_thinkpad_p15v_gen_3_type_21em_21en:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_windows_11_version_21h2_or_later_10_64-bit_version_20h2_or_later_-_thinkpad_p15v_gen_3_type_21en_21em:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_11_version_21h2_-_thinkpad_p15v_gen_3_type_21em_21en:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_version_20h2_or_later_-_thinkpad_p15v_gen_3_type_21en_21em:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:loq_15ahp9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:legion_slim_5_16ahp9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkbook_16_g7_arp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkbook_14_g7_arp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p8_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p358_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_z16_gen_2_21jy:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_z16_gen_2_21jx:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_z13_gen_2_21jw:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_z13_gen_2_21jv:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkbook_16_g6_abp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkbook_14_g6_abp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:lenovo_13w_yoga_gen_2_82ys:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:lenovo_13w_yoga_gen_2_82yr:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:lenovo_13w_yoga_82s2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:lenovo_13w_yoga_82s1:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkcentre_m75n:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p620_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t16_gen_2_21k8:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t16_gen_2_21k7:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t14s_gen_4_21f9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t14s_gen_4_21f8:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t14_gen_4_21k4:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_t14_gen_4_21k3:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p16v_gen_1_21ff:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p16v_gen_1_21fe:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p16s_gen_2_21ka:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p16s_gen_2_21k9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p15v_gen_3_21em:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p15v_gen_3_21en:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p14s_gen_4_21k6:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkpad_p14s_gen_4_21k5:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p360_ultra_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p7_intel_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p5_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p520c_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:thinkstation_p360_workstation:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_11_version_21h2_or_later_-_thinkpad_z13_gen_2_z16_gen_2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_10_version_21h2_or_later_-_thinkpad_z13_gen_2_z16_gen_2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_version_21h2_or_later_-_thinkpad_z13_gen_2_z16_gen_2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_11_version_21h2_or_later_-_thinkpad_p16v_gen_1_type_21fe_21ff:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_10_64-bit_version_21h2_or_later_-_thinkpad_p16v_gen_1_type_21fe_21ff:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_11_version_21h2_or_later_-_thinkpad_p16v_gen_1_type_21fe_21ff:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_64-bit_version_21h2_or_later_-_thinkpad_p16v_gen_1_type_21fe_21ff:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_io_driver_for_windows_10_64-bit_version_21h2_or_later_-_thinkpad:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_vga_driver_for_windows_11_64-bit_-_thinkbook_14_g7_arp_thinkbook_16_g7_arp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_vga_driver_for_windows_11_64-bit_-_thinkbook_14_g6_abp_thinkbook_16_g6_abp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_vga_driver_for_windows_10_64-bit_-_thinkbook_14_g6_abp_thinkbook_14_g6_abp:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_vga_driver_for_windows_11_64-bit_-_loq_15ahp9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_vga_driver_for_windows_11_64-bit_-_legion_slim_5_16ahp9:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_11_version_22h2_or_later_-_lenovo_13w_yoga_gen_2_type_82yr_82ys:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_version_22h2_or_later_-_lenovo_13w_yoga_gen_2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_11_version_21h2_or_later_-_lenovo_13w_yoga_type_82s1_82s2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_64-bit_version_21h2_or_later_-_lenovo_13w_yoga_type_82s1_82s2:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_iot_64-bit_-_thinkcentre_m75n:*:*:*:*:*:*:*:*
• cpe:2.3:h:lenovo:amd_graphics_driver_for_windows_10_64-bit_version_1909_or_later_-_thinkcentre_m75n:*:*:*:*:*:*:*:*

External links

https://support.lenovo.com/us/en/product_security/LEN-167315

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.