8.5
High
CVE-2025-54517 Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via…
Description
Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Instinct™ MI250 | Versions not published | |
| AMD Instinct™ MI308X | Versions not published | |
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI300X | Versions not published | |
| AMD Instinct™ MI325X | Versions not published | |
| AMD Instinct™ MI210 | Versions not published | |
| AMD Radeon™ PRO V620 | Versions not published | |
| AMD Radeon™ PRO V710 | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD Instinct™ MI250
The 21 CVEs of AMD Instinct™ MI250 →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank…
7.7
High
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to…
9.2
Critical
CVE-2025-52532
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the…
2.0
Low