CVE-2023-31313 — AMD / AMD Instinct™ MI210

CVE-2023-31313

AMD / AMD Instinct™ MI210 PUBLISHED

Description (CNA)

An unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a privileged attacker to send malformed messages to the system management unit (SMU) potentially resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
AMD / AMD Instinct™ MI210	unaffected ROCm 6.4.2
AMD / AMD Instinct™ MI250	unaffected ROCm 6.4.2

CWE

CWE-441

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.