CVE-2023-31324
- State
- Published
- Severity
- 7.1 High
- Published
- Feb 11, 2026
- Updated
- Feb 11, 2026
- Reserved
- Apr 27, 2023
Description
A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L | AMD |
Weaknesses
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition
Affected Products
| Product | Versions |
|---|---|
AMD Radeon™ RX 5000 Series Graphics ProductsAMD |
|
AMD Radeon™ PRO W5000 Series Graphics ProductsAMD |
|
AMD Instinct™ MI210AMD |
|
AMD Instinct™ MI250AMD |
|
AMD Instinct™ MI300AAMD |
|
AMD Instinct™ MI300XAMD |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.