A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
History

Thu, 12 Feb 2026 11:30:00 +0000

Type Values Removed Values Added
First Time appeared Amd
Amd instinct Mi210
Amd instinct Mi250
Amd instinct Mi300a
Amd instinct Mi300x
Amd radeon Pro W5000 Series
Amd radeon Rx 5000 Series
Vendors & Products Amd
Amd instinct Mi210
Amd instinct Mi250
Amd instinct Mi300a
Amd instinct Mi300x
Amd radeon Pro W5000 Series
Amd radeon Rx 5000 Series

Wed, 11 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 11 Feb 2026 15:00:00 +0000

Type Values Removed Values Added
Description A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker to modify External Global Memory Interconnect Trusted Agent (XGMI TA) commands as they are processed potentially resulting in loss of confidentiality, integrity, or availability.
Weaknesses CWE-367
References
Metrics cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published: 2026-02-11T14:34:54.024Z

Updated: 2026-02-11T15:42:39.488Z

Reserved: 2023-04-27T15:25:41.424Z

Link: CVE-2023-31324

cve-icon Vulnrichment

Updated: 2026-02-11T15:36:38.949Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-02-11T15:16:11.487

Modified: 2026-02-11T15:27:26.370

Link: CVE-2023-31324

cve-icon Redhat

No data.