Executive brief
A security vulnerability exists in the AMD MxGPU-Virtualization driver, which is used to manage graphics hardware in virtualized environments. An attacker with local access to the system could exploit a timing issue to cause a system crash or instability. This could lead to a denial-of-service, impacting the availability of the virtualized infrastructure.
Technical details
A race condition exists in the AMD MxGPU-Virtualization driver due to unsynchronized access to the global variable 'amdgv_cmd' within an unlocked ioctl handler. An attacker with low privileges and local access can exploit this Time-of-Check Time-of-Use (TOCTOU) vulnerability by making concurrent calls to the affected ioctl path. Successful exploitation triggers a heap-based buffer overflow, which can be used to cause a denial-of-service (DoS) within the system context. The vulnerability is tracked as CWE-367.
Affected products
- AMD MxGPU-Virtualization driver
Timeline
- 2026-05-15: advisory: Initial disclosure by AMD and NVD publication.