4.7
Medium
CVE-2025-0034 Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed…
Description
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Instinct™ MI300X | Versions not published | |
| AMD Instinct™ MI325X | Versions not published |
Other CVEs of AMD Instinct™ MI300X
The 19 CVEs of AMD Instinct™ MI300X →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank…
7.7
High
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to…
9.2
Critical
CVE-2025-52532
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the…
2.0
Low