CVE-2026-0481

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

Score

CVSS 4.0 9.2 Critical

Status

Awaiting Analysis - psirt@amd.com

Published

2026-05-15

Last modified

2026-10-26

Weaknesses

CWE-1327

Affected products

• Amd Instinct Mi210 (Amd)
• Amd Instinct Mi250 (Amd)
• Amd Instinct Mi250x (Amd)
• Amd Instinct Mi300a (Amd)
• Amd Instinct Mi300x (Amd)
• Amd Instinct Mi308x (Amd)
• Amd Instinct Mi325x (Amd)
• Amd Instinct Mi350x (Amd)
• Amd Instinct Mi355x (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6031.html