EUVD-2026-92811

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

ROS-20261006-73-0320

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system’s kernel is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-106366

AMD RCCL vulnerability CVE-2026-43598 in the ROCm Communication Collectives Library could allow RCE on Instinct GPUs. Update to ROCm 7.14. AMD ROCm RCCL CVE202643598 AMDInstinct GPUSecurity AISecurity Vulnerability https://t.co/xRbGtJaCMi...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0461

The AMD Zynq™ UltraScale+ MPSoC and RFSoC devices are vulnerable to a buffer overflow due to insufficient boundary validation in the USB boot mode implementation. An attacker could send unbounded Device Firmware Upgrade (DFU) download requests, causing the DDR receive buffer to overflow into FSBL...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0482

The AMD Versal™ Adaptive SoC devices are vulnerable to a buffer overflow due to insufficient boundary checks within the USB boot mode . This vulnerability can be triggered by providing crafted images when USB boot mode is enabled through specific board modifications . Successful exploitation allo...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-90239

A flaw was found in the Linux kernel's AMD ISP4 driver. When allocating GPU memory, the isp4ifallocfwgpumem function fails to release partially allocated memory pools if an error occurs during the process. This memory leak could lead to system instability or a Denial of Service DoS over time, as...

CVE-2026-98092

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA AMD audio driver. This vulnerability can lead to a Denial of Service DoS due to a memory leak when closing audio capture streams. A local user could exploit this flaw by repeatedly opening and closing the affected audio...

CVE-2023-20598-PDFWKRNL

AMD RadeonドライバPDFWKRNL.sys向けの概念実証エクスプロイトで、低整合性プロセスから動作できるように設計されています。...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 데모 CVE-2023-20562 설명 이 데모는 대만에서 열린 HITCON 2023에서 진행되었습니다. 데모는 AMD μProf 내의 AMDCpuProfiler.sys를 악용하는 방법을 보여줍니다. EPROCESS 토큰에 대해 임의 쓰기를 트리거하여 SYSTEM 수준으로 권한 상승이 이루어집니다. DSE 플래그를 비활성화하면 악성 서명되지 않은 드라이버를 로드할 수 있습니다. 발표는 또한 360 Total Security의 ObRegisterCallbacks를 무효화하여 360 Total Security의...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed the issue where the mmap write lock was not released. If the mmap write lock is acquired while draining a retry fault, the mmap write lock is not released because svmrangerestorepages calls mmapreadunlock before...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Fixed a potential index out of bounds issue in the color transformation function. The issue could occur when the index ‘i’ exceeds the number of transfer function points TRANSFERFUNCPOINTS. The fix includes a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A memory leak was fixed in dmswfini. After destroying dmubsrv, the memory associated with it wasn’t freed, resulting in a memory leak: Unreferenced object: 0xffff896302b45800 size: 1024 Contents: comm...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Fixed a kernel panic that occurred when loading the driver. After loading the amd-pstate-ut driver, the functions amdpstateutcheckperf and amdpstateutcheckfreq use cpufreqcpuget to obtain the CPU’s policy...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, and Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: Added a null check before passing variables. Checked for null pointers before passing variables to functions. This fixes 3 NULLRETURNS issues reported by Coverity...