4.6
CVE-2026-0427
- EPSS 0.01%
- Veröffentlicht 15.05.2026 02:51:22
- Zuletzt bearbeitet 15.05.2026 14:10:17
- Quelle psirt@amd.com
- CVE-Watchlists
- Unerledigt
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerAMD
≫
Produkt
AMD Instinct™ MI210
Default Statusaffected
Version
GIM 8.2.0.K
Status
unaffected
HerstellerAMD
≫
Produkt
AMD Instinct™ MI300X
Default Statusaffected
Version
GIM 8.2.0.K
Status
unaffected
HerstellerAMD
≫
Produkt
AMD Instinct™ MI325X
Default Statusaffected
Version
GIM 8.2.0.K
Status
unaffected
HerstellerAMD
≫
Produkt
AMD Radeon™ PRO V710
Default Statusaffected
Version
Contact your AMD Customer Engineering representative
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.022 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@amd.com | 4.6 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-459 Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.