CVE-2025-52532
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AMD | AMD Instinct™ MI210 | GIM Driver 8.4 | unaffected |
| AMD | AMD Instinct™ MI250 | GIM Driver 8.4 | unaffected |
| AMD | AMD Instinct™ MI300A | GIM Driver 8.4 | unaffected |
| AMD | AMD Instinct™ MI300X | GIM Driver 8.4 | unaffected |
| AMD | AMD Instinct™ MI308X | GIM Driver 8.4 | unaffected |
| AMD | AMD Instinct™ MI325X | GIM Driver 8.4 | unaffected |
| AMD | AMD Radeon™ PRO V620 | Contact your AMD Customer Engineering representative | unaffected |
| AMD | AMD Radeon™ PRO V710 | Contact your AMD Customer Engineering representative | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-52532
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Source: NVD (National Vulnerability Database)
Vulnerability Title
AMD Graphics Driver 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AMD Graphics Driver是美国超威半导体（AMD）公司的一款集成显卡驱动程序。 AMD Graphics Driver存在安全漏洞，该漏洞源于ioctl路径中并发非同步访问全局变量amdgv_cmd导致竞争条件，可能被攻击者利用触发堆缓冲区溢出，导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AMD | AMD Radeon™ PRO V620 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Radeon™ PRO V710 | Contact your AMD Customer Engineering representative | - | |
| AMD | AMD Instinct™ MI250 | GIM Driver 8.4 | - | |
| AMD | AMD Instinct™ MI308X | GIM Driver 8.4 | - | |
| AMD | AMD Instinct™ MI300A | GIM Driver 8.4 | - | |
| AMD | AMD Instinct™ MI300X | GIM Driver 8.4 | - | |
| AMD | AMD Instinct™ MI325X | GIM Driver 8.4 | - | |
| AMD | AMD Instinct™ MI210 | GIM Driver 8.4 | - |
II. Public POCs for CVE-2025-52532
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-52532
请登录查看更多情报信息。
Same Patch Batch · AMD · 2026-05-15 · 39 CVEs total
| CVE-2025-52540 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2025-0040 | AMD Processors 访问控制错误漏洞 | |
| CVE-2024-21962 | AMD RAID Driver 安全漏洞 | |
| CVE-2025-29935 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2025-29944 | AMD Ryzen 安全漏洞 | |
| CVE-2025-29938 | AMD多款产品 安全漏洞 | |
| CVE-2025-29937 | AMD Processors 缓冲区错误漏洞 | |
| CVE-2025-0028 | AMD Chipset 安全漏洞 | |
| CVE-2025-29936 | AMD多款产品 输入验证错误漏洞 | |
| CVE-2025-48513 | AMD Chipset 安全漏洞 | |
| CVE-2021-26380 | AMD Graphics Driver 输入验证错误漏洞 | |
| CVE-2025-48520 | AMD多款产品 缓冲区错误漏洞 | |
| CVE-2025-48519 | AMD Chipset 缓冲区错误漏洞 | |
| CVE-2025-0045 | AMD Secure Processor 安全漏洞 | |
| CVE-2026-0432 | AMD Chipset 安全漏洞 | |
| CVE-2025-48521 | AMD Processors 资源管理错误漏洞 | |
| CVE-2025-48512 | AMD Chipset 安全漏洞 | |
| CVE-2024-36345 | AMD OverDrive 安全漏洞 | |
| CVE-2026-0438 | AMD Chipset 安全漏洞 | |
| CVE-2023-31317 | AMD Graphics Driver 缓冲区错误漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-367
- CVE-2026-29518
Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arb - CVE-2026-43619
Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls - CVE-2026-41702
TOCTOU local privilege escalation vulnerability - CVE-2022-23826
AMD Processors 安全漏洞 - CVE-2026-42592
Gotenberg: DNS rebinding bypasses SSRF validation on Chromiu
V. Comments for CVE-2025-52532
No comments yet