Executive brief
An AMD product contains directories with insufficient access restrictions that could allow a local user with limited system access to escalate their privileges to a higher level of system control. A successful exploit could enable arbitrary code execution, potentially compromising the entire system.
Technical details
This vulnerability involves incorrect file system permissions on critical directories in an AMD product, enabling local privilege escalation. An unprivileged local user can exploit insufficient directory permissions to gain elevated system privileges, potentially achieving arbitrary code execution. The attack requires local filesystem access but does not require network connectivity or prior authentication at a higher privilege level. Exploitation could allow an attacker to compromise system integrity and confidentiality. Patches or mitigations should restrict directory permissions to prevent unauthorized access from lower-privileged accounts.
Affected products
- AMD <UNKNOWN>
Timeline
- 2026-08-11: disclosed