CVE-2022-23826

LOW

Amd Ryzen™ 3000 Series Mobile Processors With Radeon™ Graphics - Time-of-check Time-of-use (TOCTOU) Race Condition

Title source: rule
STIX 2.1

Description

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

Scores

CVSS v4 1.8
EPSS 0.0002
EPSS Percentile 3.7%
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-367
Status published
Products (21)
AMD/AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.8
AMD/AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E
AMD/AMD Instinct™ MI210 ROCm 6.4.2
AMD/AMD Instinct™ MI250 ROCm 6.4.2
AMD/AMD Radeon™ Instinct™ MI25 Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO V520 Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO V620 Contact your AMD Customer Engineering representative
AMD/AMD Radeon™ PRO VII AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
AMD/AMD Radeon™ PRO W5000 Series Graphics Products AMD Software: PRO Edition 25.Q2 (25.10.10)
AMD/AMD Radeon™ PRO W6000 Series Graphics Product AMD Software: PRO Edition 25.Q2 (25.10.10)
... and 11 more
Published May 15, 2026
Tracked Since May 15, 2026