AMD Crash Defender Improper Information Removal Vulnerability Allowing Kernel Address Disclosure

A vulnerability exists in AMD Crash Defender due to improper removal of sensitive information before storage or transfer. This flaw could enable an attacker to access kernel address information, potentially leading to a loss of confidentiality. The issue affects several AMD graphics and datacenter accelerator products, as well as some client processors.

Impact

Exploitation of this vulnerability could result in unauthorized access to kernel address information, creating a risk of confidential data exposure.

Remediation

Users are advised to update to the latest version of the AMD Radeon Software or AMD Software: PRO Edition. Specific update instructions can be found in the AMD Radeon Graphics Cards or AMD Software: PRO Edition tables.