AMD GPU Firmware Improper Resource Cleanup Vulnerability Allowing Cross-VM Access

A vulnerability exists in AMD GPU firmware due to improper cleanup of shared register resources. This issue could enable an admin-privileged attacker from one Guest Virtual Machine (VM) to access shared resources of another Guest VM, potentially leading to a loss of confidentiality, integrity, or availability.

Impact

Exploitation of this vulnerability could result in unauthorized access to shared register resources between Guest VMs, allowing for potential interference with the confidentiality, integrity, or availability of data or processes.

Remediation

Users are advised to update to GIM Driver version 8.2.0.K, available as part of the AMD Instinct MI210 and MI250 driver package.