Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-31324

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Radeon™ RX 5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Radeon™ PRO W5000 Series Graphics Products

Default version status: affected

  • AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)unaffected

AMD AMD Instinct™ MI210

Default version status: affected

  • ROCm 6.4unaffected

AMD AMD Instinct™ MI250

Default version status: affected

  • ROCm 6.4unaffected

AMD AMD Instinct™ MI300A

Default version status: affected

  • ROCm 6.4unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.4unaffected

References