7.1
High
CVE-2023-31324 A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to…
Description
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Radeon™ RX 5000 Series Graphics Products | Versions not published | |
| AMD Radeon™ PRO W5000 Series Graphics Products | Versions not published | |
| AMD Instinct™ MI210 | Versions not published | |
| AMD Instinct™ MI250 | Versions not published | |
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI300X | Versions not published |
Other CVEs of AMD Radeon™ RX 5000 Series Graphics Products
The 23 CVEs of AMD Radeon™ RX 5000 Series Graphics Products →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2021-46747
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user…
7.1
High
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation…
7.0
High
CVE-2022-23826
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly…
1.8
Low