Incorrect default permissions in AMD products - CVE-2024-21937

Vulnerability identifier: #VU100428

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-21937

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions in the AMD HIP SDK installation directory. A local user can execute arbitrary code on the system with elevated privileges.

AMD Software Cloud Edition
AMD Software PRO Edition for HIP
AMD Software PRO Edition
AMD Software Adrenalin Edition
ThinkPad T16 Gen 2 21K8
ThinkPad P14s Gen 4 21K6
ThinkPad P15v Gen 3 21EN
ThinkPad P15v Gen 3 21EM
ThinkPad P16s Gen 2 21K9
ThinkPad P16s Gen 2 21KA
ThinkPad P16v Gen 1 21FE
ThinkPad P16v Gen 1 21FF
ThinkPad T14 Gen 4 21K3
ThinkPad T14 Gen 4 21K4
ThinkPad T14s Gen 4 21F8
ThinkPad T14s Gen 4 21F9
ThinkPad T16 Gen 2 21K7
ThinkPad P14s Gen 4 21K5
ThinkPad Z13 Gen 2 21JV
ThinkPad Z13 Gen 2 21JW
ThinkPad Z16 Gen 2 21JX
ThinkPad Z16 Gen 2 21JY
ThinkStation P358 Workstation
ThinkStation P360 Ultra Workstation
ThinkStation P360 Workstation
ThinkStation P5 Workstation
ThinkStation P520c Workstation
ThinkStation P620 Workstation
ThinkStation P7 Intel Workstation
ThinkStation P8 Workstation
ThinkCentre M75n
Lenovo 13w Yoga 82S1
Lenovo 13w Yoga 82S2
Lenovo 13w Yoga Gen 2 82YR
Lenovo 13w Yoga Gen 2 82YS
Legion Slim 5 16AHP9
LOQ 15AHP9
ThinkBook 14 G6 ABP
ThinkBook 14 G7 ARP
ThinkBook 16 G6 ABP
ThinkBook 16 G7 ARP
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P7 Intel
AMD Graphics Driver for Windows 11 (Version 21H2) - ThinkPad P15v Gen 3 (Type 21EM, 21EN)
AMD Graphics Driver Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM)
AMD IO Driver for Windows 11 (Version 21H2) - ThinkPad P15v Gen 3 (Type 21EM, 21EN)
AMD IO Driver for Windows 11 (Version 21H2), 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM)
AMD IO Driver for Windows 11 (Version 22H2 or later) - ThinkPad P15v Gen 3 (Type 21EM, 21EN)
AMD Discrete Graphics Driver for Windows 11 (Version 22H2 or Later), 10 (Version 22H2) - ThinkStation P358
AMD Discrete Graphics Driver for W6400 for Windows 10 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra
AMD Discrete Graphics Driver for W6400 for Windows 11 (Version 21H2, 22H2 or Later) - ThinkStation P360 Ultra
AMD Discrete Graphics Driver for Windows 11 (Version 21H2 or Later) - ThinkStation P360
AMD Discrete Graphics Driver for Windows 10 (Version 21H2), 11 (Version 21H2, 22H2) - ThinkStation P5
AMD Discrete Graphics Driver for RX7600 for Windows 10 (Version 22H2) - ThinkStation P520c
AMD Discrete VGA Driver for Windows 11 (Version 22H2) - ThinkStation P620
AMD Graphics Driver for Windows 10 (Version 20H2 or later) - ThinkPad P15v Gen 3 (Type 21EN 21EM)
AMD Graphics Driver for Windows 11 (Version 24H2) and 10 (Version 22H2) - ThinkStation P8
AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2
AMD IO Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2
AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF)
AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF)
AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad
AMD Graphics Driver for Windows 10 IOT (64-bit) - ThinkCentre M75n
AMD Graphics Driver for Windows 10 64-bit (Version 1909 or later) - ThinkCentre M75n
AMD VGA Driver for Windows 10 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 14 G6 ABP
AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 16 G6 ABP
AMD Graphics Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS)
AMD Graphics Driver for Windows 10 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2
AMD Graphics Driver for Windows 11 (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2)
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2)
AMD VGA Driver for Windows 11 (64-bit) - Legion Slim 5 16AHP9
AMD VGA Driver for Windows 11 (64-bit) - LOQ 15AHP9
AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G7 ARP, ThinkBook 16 G7 ARP
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF)
AMD Graphics Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF)
AMD Graphics Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2

Install updates from vendor's website.

AMD Software Cloud Edition - update to 24.7.1
AMD Software PRO Edition for HIP - update to 24.10.16
AMD Software PRO Edition - update to 24.10.20
AMD Software Adrenalin Edition - update to 24.10.21.01
AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 - update to 2.2.0.134
AMD IO Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 - update to 2.2.0.134
AMD IO Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF) - update to 2.2.0.134
AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF) - update to 2.2.0.134
AMD IO Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad - update to 2.2.0.134
AMD Graphics Driver for Windows 10 IOT (64-bit) - ThinkCentre M75n - update to 31.0.12018.16003
AMD Graphics Driver for Windows 10 64-bit (Version 1909 or later) - ThinkCentre M75n - update to 31.0.12018.16003
AMD VGA Driver for Windows 10 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 14 G6 ABP - update to 31.0.21914.6001
AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G6 ABP, ThinkBook 16 G6 ABP - update to 31.0.21914.6001
AMD Graphics Driver for Windows 11 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) - update to 31.0.21918.2005
AMD Graphics Driver for Windows 10 (Version 22H2 or later) - Lenovo 13w Yoga Gen 2 - update to 31.0.21918.2005
AMD Graphics Driver for Windows 11 (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2) - update to 31.0.21918.2005
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - Lenovo 13w Yoga (Type 82S1, 82S2) - update to 31.0.21918.2005
AMD VGA Driver for Windows 11 (64-bit) - Legion Slim 5 16AHP9 - update to 32.0.11002.9001
AMD VGA Driver for Windows 11 (64-bit) - LOQ 15AHP9 - update to 32.0.11002.9001
AMD VGA Driver for Windows 11 (64-bit) - ThinkBook 14 G7 ARP, ThinkBook 16 G7 ARP - update to 32.0.11022.4
AMD Graphics Driver for Windows 10 64-bit (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF) - update to 32.0.11030.7006
AMD Graphics Driver for Windows 11 (Version 21H2 or later) - ThinkPad P16v Gen 1 (Type 21FE, 21FF) - update to 32.0.11030.7006
AMD Graphics Driver for Windows 10 (Version 21H2 or later) - ThinkPad Z13 Gen 2, Z16 Gen 2 - update to 32.0.11030.8001

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6015.html

• Incorrect default permissions in AMD HIP SDK
• Lenovo update for AMD HIP SDK