Skip to content
Sign in
1.8 Low

CVE-2022-23826 A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly…

Description

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

Affected products and versions

Product Affected versions Fixed in
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ Embedded R1000 Series Processors Versions not published
AMD Ryzen™ Embedded R2000 Series Processors Versions not published
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge") Versions not published
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso") 120 earliest → < 120A 120A
AMD Radeon™ RX 5000 Series Graphics Products Versions not published
AMD Radeon™ PRO W5000 Series Graphics Products Versions not published
Show the 12 other branches
Product Affected versions Fixed in
AMD Radeon™ RX 6000 Series Graphics Products Versions not published
AMD Radeon™ VII Versions not published
AMD Radeon™ RX Vega Series Graphics Cards Versions not published
AMD Radeon™ PRO W6000 Series Graphics Product Versions not published
AMD Radeon™ PRO W6000 Series Graphics Products Versions not published
AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards Versions not published
AMD Radeon™ PRO VII Versions not published
AMD Instinct™ MI250 Versions not published
AMD Instinct™ MI210 Versions not published
AMD Radeon™ Instinct™ MI25 Versions not published
AMD Radeon™ PRO V520 Versions not published
AMD Radeon™ PRO V620 Versions not published

Other CVEs of AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

The 21 CVEs of AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics →
CVE-2021-46747 Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user… 7.1 High CVE-2025-48516 Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with… 6.9 Medium CVE-2024-21962 Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location… 8.6 High CVE-2025-62625 Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download… 6.0 Medium
Track this CVE