CVE-2025-52532

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

Score

CVSS 4.0 2.0 Low

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-10-14

Weaknesses

CWE-367

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Radeon Pro V620 (Amd)
• Amd Radeon Pro V710 (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html