VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 11, 2026

CVE-2023-31324

CVE-2023-31324

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Affected products

7
  • AMD/Secure Processorllm-fuzzy
  • AMD/AMD Instinct™ MI210v5
    Range: ROCm 6.4
  • AMD/AMD Instinct™ MI250v5
    Range: ROCm 6.4
  • AMD/AMD Instinct™ MI300Av5
    Range: ROCm 6.4
  • AMD/AMD Instinct™ MI300Xv5
    Range: ROCm 6.4
  • AMD/AMD Radeon™ PRO W5000 Series Graphics Productsv5
    Range: AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
  • AMD/AMD Radeon™ RX 5000 Series Graphics Productsv5
    Range: AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.