CVE-2023-31324
HIGHAMD Secure Processor - TOCTOU
Title source: llmDescription
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Classification
CWE
CWE-367
Status
published
Affected Products (5)
amd/rocm
< 6.2.0
amd/radeon_software
< 25.q2
amd/radeon_pro_vii_firmware
amd/radeon_software
< 24.6.1
amd/radeon_vii_firmware
Timeline
Published
Feb 11, 2026
Tracked Since
Feb 18, 2026