7.7
High
CVE-2026-43598 Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank…
Description
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Instinct™ MI210 | Versions not published | |
| AMD Instinct™ MI250 | Versions not published | |
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI300X | Versions not published | |
| AMD Instinct™ MI325X | Versions not published | |
| AMD Instinct™ MI350X | Versions not published | |
| AMD Instinct™ MI355X | Versions not published | |
| AMD Instinct™ MI308X | Versions not published | |
| AMD Instinct™ MI250X | Versions not published |
Other CVEs of AMD Instinct™ MI210
The 22 CVEs of AMD Instinct™ MI210 →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to…
9.2
Critical
CVE-2025-52532
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the…
2.0
Low
CVE-2026-0427
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest…
4.6
Medium