AMD Products VCN-JPEG Hardware Register Space Vulnerability Allowing Unauthorized Access and Data Manipulation

A vulnerability exists due to improper isolation of the VCN-JPEG hardware register space. This flaw could enable a malicious guest virtual machine (VM) or process to access the register space of the JPEG cores assigned to a victim VM or process. Exploitation of this vulnerability could lead to unauthorized read or write access to the victim's data.

Impact

Exploitation could result in unauthorized access to a VM's or process's data, with the potential for arbitrary read or write operations.

Remediation

Users are advised to update to AMD ROCm version 6.3 or later. Specific update details can be found in the AMD Security Bulletin AMD-SB-6027.