AMD TEE SOC Driver Insufficient Parameter Sanitization Vulnerability Allowing Malformed Command Exploitation

A vulnerability exists in the AMD Trusted Execution Environment (TEE) System-on-Chip (SoC) driver due to inadequate parameter sanitization. This flaw could enable an attacker to send a malformed command, specifically 'DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS', to a remote die. The exploitation of this vulnerability could result in the unauthorized writing of invalid data to the remote die, potentially causing unexpected behavior in the system.

Impact

Exploitation of this vulnerability could lead to unexpected behavior in the affected system.

Remediation

Users are advised to update to AMD ROCm version 6.3.1 or later. For AMD Radeon PRO V620 graphics cards, update to version 25.Q4 (25.10.37.01).