Skip to content
OpenAdvisories
High · 8.8 CVE-2024-36323 EUVD-2024-55589GHSA-r92r-8g7f-hqj2

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized ac…

Published May 15, 2026 · Updated May 16, 2026 · Assigned by AMD

Description

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

Affected products

VendorProductAffectedFixed
AMD AMD Radeon™ RX 7000 Series Graphics Products — Radeon Software for Linux 24.20.3
AMD AMD Radeon™ PRO W7000 Series Graphics Products — Radeon Software for Linux 24.20.3
AMD AMD Instinct™ MI308X — ROC 6.3
AMD AMD Instinct™ MI325X — ROC 6.3
AMD AMD Instinct™ MI300X — ROCm 6.3
AMD AMD Instinct™ MI300A — ROCm 6.3

Advisories 1

References