Skip to content
OpenAdvisories
High · 7.1 CVE-2023-31324 EUVD-2023-35635GHSA-j7v8-xc2j-g5q6

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Mem…

Published Feb 11, 2026 · Updated Feb 11, 2026 · Assigned by AMD

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Affected products

VendorProductAffectedFixed
AMD AMD Radeon™ RX 5000 Series Graphics Products — AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD AMD Radeon™ PRO W5000 Series Graphics Products — AMD Software: Adrenalin Edition 25.6.1 (25.10.13.01), AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD AMD Instinct™ MI210 — ROCm 6.4
AMD AMD Instinct™ MI250 — ROCm 6.4
AMD AMD Instinct™ MI300A — ROCm 6.4
AMD AMD Instinct™ MI300X — ROCm 6.4

Advisories 1

References