Executive brief
A security flaw in AMD GPU firmware could allow a user with administrative privileges on a virtual machine to access data belonging to other virtual machines sharing the same hardware. This bypasses the security isolation typically provided by virtualization, potentially leading to the theft of sensitive information or disruption of services. The issue stems from the hardware not properly clearing shared memory areas between different users.
Technical details
The vulnerability is classified as an incomplete cleanup (CWE-459) within AMD GPU firmware. When multiple Guest Virtual Machines (VMs) share GPU hardware resources, the firmware fails to properly sanitize or reset shared register resources during context switching or resource reallocation. An attacker with administrative (high) privileges within a guest VM can exploit this to read from or write to registers used by a different guest VM. This cross-VM leakage compromises the confidentiality and integrity of the guest environments. The attack requires local access to a guest VM and targets the hardware-level isolation provided by the GPU firmware.
Affected products
- AMD GPU Firmware
Timeline
- 2026-05-15: advisory: AMD published security bulletin AMD-SB-6027
- 2026-05-15: disclosed: CVE-2026-0427 published to NVD dataset