CVE-2022-23826

Time‑Of‑Check to Time‑Of‑Use Race Condition in AMD Graphics Interface

Published May 15, 2026 CVSS 4.0 · 1.8 Low EPSS < 1% KEV · Not listed
Description
A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd instinct Mi210
Amd instinct Mi250
Amd radeon Instinct Mi25
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Vendors & Products Amd
Amd athlon 3000 Series Mobile Processors With Radeon Graphics
Amd instinct Mi210
Amd instinct Mi250
Amd radeon Instinct Mi25
Amd radeon Pro V520
Amd radeon Pro V620
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Amd ryzen 3000 Series Mobile Processors With Radeon Graphics
Amd ryzen Embedded R1000 Series Processors
Amd ryzen Embedded R2000 Series Processors
Amd ryzen Embedded V1000 Series Processors
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Time‑Of‑Check to Time‑Of‑Use Race Condition in AMD Graphics Interface
Type Values Removed Values Added
Description A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a loss of integrity.
Weaknesses CWE-367
References
Metrics cvssV4_0

{'score': 1.8, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N'}