VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026

CVE-2023-31324

CVE-2023-31324

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Affected products

13
  • AMD/Radeon Software2 versions
    cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*+ 1 more
    • cpe:2.3:a:amd:radeon_software:*:*:*:*:adrenalin:*:*:*range: <24.6.1
    • cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*range: <25.q2
  • AMD/Rocm
    cpe:2.3:a:amd:rocm:*:*:*:*:*:*:*:*
    Range: <6.2.0
  • AMD/Radeon Pro Vii Firmware
    cpe:2.3:o:amd:radeon_pro_vii_firmware:-:*:*:*:*:*:*:*
  • AMD/Radeon Vii Firmware
    cpe:2.3:o:amd:radeon_vii_firmware:-:*:*:*:*:*:*:*
  • AMD/External Global Memory Interconnect Trusted Agentllm-create
  • AMD/Secure Processorllm-fuzzy
  • AMD/AMD Instinct™ MI210v5
    Range: ROCm 6.4
  • AMD/AMD Instinct™ MI250v5
    Range: ROCm 6.4
  • AMD/Instinct Mi300a Firmwarecpe-rescue
    Range: ROCm 6.4
  • AMD/Instinct Mi300x Firmwarecpe-rescue
    Range: ROCm 6.4
  • AMD/AMD Radeon™ PRO W5000 Series Graphics Productsv5
    Range: AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
  • AMD/AMD Radeon™ RX 5000 Series Graphics Productsv5
    Range: AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.