CVE-2023-31324

7.1 highEPSS 0.1%

High (7.1) in amd. EPSS 0.1% chance of exploitation in the next 30 days.

A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2026-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:radeon_pro_vii_firmware
amd:radeon_software
amd:radeon_vii_firmware
amd:rocm

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html

Check your stack JSON