Описание
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability.
Затрагиваемое ПО
Amd RocmAmd Instinct mi210Amd Instinct mi250Amd Instinct mi300aAmd Instinct mi300xAmd Radeon softwareAmd Radeon pro w5500Amd Radeon pro w5500xAmd Radeon pro w5700Amd Radeon pro w5700xAmd Radeon rx 5300Amd Radeon rx 5300 xtAmd Radeon rx 5300mAmd Radeon rx 5500Amd Radeon rx 5500 xtAmd Radeon rx 5500mAmd Radeon rx 5600Amd Radeon rx 5600 xtAmd Radeon rx 5600mAmd Radeon rx 5700Amd Radeon rx 5700 xtAmd Radeon rx 5700mAmd Radeon vii firmwareAmd Radeon viiAmd Radeon pro vii firmware
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
Источники
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html