Vulnerability in AMD Instinct™ Mi300a
CVE-2024-36323
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (0.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 1st percentile — 0.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- AMD Instinct™ Mi300a — versions ROCm 6.3
- AMD Instinct™ Mi300x — versions ROCm 6.3
- AMD Instinct™ Mi308x — versions ROC 6.3
- AMD Instinct™ Mi325x — versions ROC 6.3
- AMD Radeon™ Pro W7000 Series Graphics Products — versions Radeon Software for Linux 24.20.3, AMD Software: PRO Edition 25.Q3.1 (25.10.32)
- AMD Radeon™ Rx 7000 Series Graphics Products — versions Radeon Software for Linux 24.20.3, AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01)