Skip to content
CVE PROGRAM SOURCE RECORD1.8 Low

CVE-2026-0428

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die,

Description

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD Instinct™ MI300A

Default version status: affected

  • BKC 26unaffected

AMD AMD Instinct™ MI300X

Default version status: affected

  • ROCm 6.3.1unaffected

AMD AMD Instinct™ MI308X

Default version status: affected

  • ROCm 6.4.2unaffected

AMD AMD Instinct™ MI325X

Default version status: affected

  • ROCm 6.3.1unaffected

References