CVE-2026-0428: AMD Instinct MI300A

Low severity, CVSS 1.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

Affected products

  • AMD AMD Instinct MI300A
  • AMD AMD Instinct MI300X
  • AMD AMD Instinct MI308X
  • AMD AMD Instinct MI325X

Published 2026-05-15. Last modified 2026-06-17.