1.8
Low
CVE-2026-0428 Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed…
Description
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD Instinct™ MI300A | Versions not published | |
| AMD Instinct™ MI300X | Versions not published | |
| AMD Instinct™ MI308X | Versions not published | |
| AMD Instinct™ MI325X | Versions not published |
Other CVEs of AMD Instinct™ MI300A
The 23 CVEs of AMD Instinct™ MI300A →
CVE-2026-43603
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of…
6.9
Medium
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank…
7.7
High
CVE-2023-20577
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI…
7.4
High
CVE-2026-0481
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to…
9.2
Critical