CVE-2024-36323
8.8
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Summary
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | Radeon Software for Linux 24.20.3 | unaffected |
| AMD | AMD Radeon™ RX 7000 Series Graphics Products | AMD Software: Adrenalin Edition 25.10.2 (25.20.21.01) | unaffected |
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | Radeon Software for Linux 24.20.3 | unaffected |
| AMD | AMD Radeon™ PRO W7000 Series Graphics Products | AMD Software: PRO Edition 25.Q3.1 (25.10.32) | unaffected |
| AMD | AMD Instinct™ MI308X | ROC 6.3 | unaffected |
| AMD | AMD Instinct™ MI325X | ROC 6.3 | unaffected |
| AMD | AMD Instinct™ MI300X | ROCm 6.3 | unaffected |
| AMD | AMD Instinct™ MI300A | ROCm 6.3 | unaffected |
Weaknesses
- Security Vulnerability
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.