AMD GPU Firmware/Driver Vulnerability Advisory (AMD-SB-6027)

AMD Graphics Vulnerability Security Advisory Summary (AMD-SB-6027) Vulnerability Overview AMD conducted an audit of its graphics and data center accelerator products and received external reports identifying a series of potential vulnerabilities. These vulnerabilities primarily involve issues with memory management, privilege controls, firmware integrity, and parameter validation in drivers. Key Risk Points: Privilege Escalation and Code Execution: Multiple vulnerabilities allow attackers to gain unauthorized access via privileged applications or virtual machines (VMs), leading to arbitrary code execution or privilege escalation (e.g., CVE-2024-36323, CVE-2021-46747, CVE-2023-31317). Data Leakage and Integrity Compromise: Issues such as out-of-bounds reads and insufficient memory buffer checks can lead to sensitive data leakage or data integrity compromise (e.g., CVE-2025-54517, CVE-2024-21950). Denial of Service (DoS): Some vulnerabilities can cause system reboots or denial of service (e.g., CVE-2024-36332). Firmware and Hardware State Tampering: Involves compromise of integrity in power management firmware, the Accelerated Security Processor (ASP), and hardware configuration states (e.g., CVE-2023-31316, CVE-2023-31309). Affected Scope The affected products primarily include AMD Accelerator Cards (Instinct series) and AMD Radeon PRO Graphics Cards. AMD Instinct Series: MI210, MI250, MI300A, MI300X, MI308X, MI325X. AMD Radeon PRO Series: V520, V620, Instinct MI25. Remediation AMD has released mitigations and recommends that users update their drivers or firmware to the specified versions or higher. AMD Accelerator Cards (1) No fix planned, as the affected component is the immutable factory-locked BL0 FW. Additionally, there is no exposable GPU data within the RM firmware. AMD Radeon PRO Graphics Cards Note: For the Radeon PRO series, AMD recommends contacting a Customer Engineer Representative directly for remediation rather than providing a specific driver version number.

Goal Reached Thanks to every supporter — we hit 100%!

AMD GPU Firmware/Driver Vulnerability Advisory (AMD-SB-6027)