{"id":"CVE-2023-31324","aliases":["EUVD-2023-35635","GHSA-j7v8-xc2j-g5q6"],"status":"published","title":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...","description":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.","severity":{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00109,"percentile":0.01258,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-367"],"published":"2026-02-11T14:34:54Z","modified":"2026-06-17T05:56:47Z","products":[{"vendor":"amd","product":"amd instinct™ mi210"},{"vendor":"amd","product":"amd instinct™ mi250"},{"vendor":"amd","product":"amd instinct™ mi300a"},{"vendor":"amd","product":"amd instinct™ mi300x"},{"vendor":"amd","product":"amd radeon™ pro w5000 series graphics products"},{"vendor":"amd","product":"amd radeon™ rx 5000 series graphics products"},{"vendor":"amd","product":"radeon_pro_vii_firmware"},{"vendor":"amd","product":"radeon_software"},{"vendor":"amd","product":"radeon_vii_firmware"},{"vendor":"amd","product":"rocm"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6024.html","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31324"},{"url":"https://github.com/advisories/GHSA-j7v8-xc2j-g5q6"}],"sources":{"cve":[{"id":"CVE-2023-31324","description":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.","status":"published","published":"2026-02-11T14:34:54.024Z","modified":"2026-02-11T15:42:39.488Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"high","assessor":"cna"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:35:27.810438Z"}],"euvd":[{"id":"EUVD-2023-35635","description":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.","status":"published","published":"2026-02-11T14:34:54Z","modified":"2026-02-11T15:42:39Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L","level":"high"}],"updated_at":"2026-11-02T19:48:40.797648Z"}],"ghsa":[{"id":"GHSA-j7v8-xc2j-g5q6","title":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...","description":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.","status":"published","published":"2026-02-11T15:30:27Z","modified":"2026-03-05T18:31:35Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T15:06:27.497427Z"}],"nvd":[{"id":"CVE-2023-31324","description":"A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.","status":"published","published":"2026-02-11T15:16:11.487Z","modified":"2026-06-17T05:56:47.96Z","cvss":[{"version":"4.0","score":7.1,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:09:27.733183Z"}]}}