AMD Secure Processor TOCTOU Race Condition Vulnerability Allowing Modification of XGMI TA Commands

A time-of-check time-of-use (TOCTOU) race condition has been identified in the AMD Secure Processor (ASP). This vulnerability could allow an attacker to alter External Global Memory Interconnect Trusted Agent (XGMI TA) commands during processing, potentially leading to a loss of confidentiality, integrity, or availability.

Impact

Exploitation of this vulnerability could result in unauthorized modifications to XGMI TA commands, with potential consequences for confidentiality, integrity, or availability.

Remediation

Users can update to the AMD ROCm version 6.4 or later. For AMD Radeon PRO V7000 Series Graphics Products, contact your AMD Customer Engineering representative.