CVE-2023-31324

HIGH

AMD Secure Processor - TOCTOU

Title source: llm

Description

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Scores

CVSS v3 7.8
EPSS 0.0001
EPSS Percentile 2.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Classification

CWE
CWE-367
Status published

Affected Products (5)

amd/rocm < 6.2.0
amd/radeon_software < 25.q2
amd/radeon_pro_vii_firmware
amd/radeon_software < 24.6.1
amd/radeon_vii_firmware

Timeline

Published Feb 11, 2026
Tracked Since Feb 18, 2026