CVE-2022-23826: AMD Ryzen™ 3000 Series Mobile Processors with Radeon™

Описание

Оригинално описание

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

Засегнати продукти

• AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics: PicassoPI-FP5 1.0.0.E
• AMD AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics: PicassoPI-FP5 1.0.0.E
• AMD AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics: ComboAM4v2 PI 1.2.0.8
• AMD AMD Ryzen™ Embedded R1000 Series Processors: EmbeddedPI-FP5_1.2.0.A
• AMD AMD Ryzen™ Embedded R2000 Series Processors: EmbeddedR2KPI-FP5_1.0.0.2
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"): EmbeddedPI-FP5_1.2.0.A
• AMD AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso"): 120A
• AMD AMD Radeon™ RX 5000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)
• AMD AMD Radeon™ PRO W5000 Series Graphics Products: AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ RX 6000 Series Graphics Products: AMD Software: Adrenalin Edition 25.5.1 (25.10.01.09)
• AMD AMD Radeon™ VII: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ RX Vega Series Graphics Cards: AMD Software: Adrenalin Edition 25.5.1 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ PRO W6000 Series Graphics Product: AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO W6000 Series Graphics Products: AMD Software: PRO Edition 25.Q2 (25.10.10)
• AMD AMD Radeon™ PRO WX 8000/9000 Series Graphics Cards: AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Radeon™ PRO VII: AMD Software: PRO Edition 25.Q2 (23.19.23.01 pre-RDNA)
• AMD AMD Instinct™ MI250: ROCm 6.4.2
• AMD AMD Instinct™ MI210: ROCm 6.4.2
• AMD AMD Radeon™ Instinct™ MI25: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V520: Contact your AMD Customer Engineering representative
• AMD AMD Radeon™ PRO V620: Contact your AMD Customer Engineering representative

Вид слабост

• CWE-367 Състезание за ресурси от тип TOCTOU

История

Други уязвимости в AMD AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics

• 6.9CVE-2026-43603
• 7.7CVE-2026-43598
• 7.4CVE-2023-20577
• 5.6CVE-2023-20572
• 7.1CVE-2021-46747

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-23826
• https://nvd.nist.gov/vuln/detail/CVE-2022-23826
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html