CVE-2025-54517

Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.

Score

CVSS 4.0 8.5 High

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-10-14

Weaknesses

CWE-787

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Radeon Pro V620 (Amd)
• Amd Radeon Pro V710 (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html