CVE-2024-36353

State
Published
Severity
6.5 Medium
Published
Mar 2, 2025
Updated
Oct 14, 2025
Reserved
May 23, 2024

Read the record on cve.org

Description

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:NAMD

Weaknesses

Affected Products

ProductVersions
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 6000 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7000 Series Desktop ProcessorAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 9000HX Series ProcessorsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ AI Max 300 Series ProcessorsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ Z2 Series Processors ExtremeAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 7035 Series Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 8000 Series Desktop ProcessorsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Ryzen™ 9000 Series Desktop ProcessorsAMD
  • Radeon Software For Linux 25.10.1Not affected
Ryzen™ Embedded R1000AMD
  • Kernel 6.12.25 LTSNot affected
Ryzen™ Embedded R2000AMD
  • Kernel 6.12.25 LTSNot affected
AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")AMD
  • Kernel 6.12.25 LTSNot affected
Ryzen™ Embedded V2000AMD
  • Kernel 6.12.25 LTSNot affected
Ryzen™ Embedded V3000AMD
  • Kernel 6.12.25 LTSNot affected
AMD Ryzen Embedded V2000A Series ProcessorsAMD
  • Kernel 6.12.25 LTSNot affected
AMD Radeon™ RX 5000/PRO W5000 Series Graphics ProductsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Radeon™ RX6000/PRO W6000 Series Graphics ProductsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Radeon™ RX 7000/PRO W7000 Series Graphics ProductsAMD
  • Radeon Software For Linux 25.10.1Not affected
AMD Radeon™ PRO V520AMD
  • Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V620AMD
  • Contact your AMD Customer Engineering representativeNot affected
AMD Radeon™ PRO V710AMD
  • Contact your AMD Customer Engineering representativeNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.