CVE-2025-52532

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-52532", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2025-06-17T16:53:10.412Z", "datePublished": "2026-05-15T02:59:46.954Z", "dateUpdated": "2026-05-15T11:13:19.425Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-05-15T02:59:46.954Z"}, "affected": [{"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 PRO V620", "versions": [{"version": "Contact your AMD Customer Engineering representative", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Radeon\u2122 PRO V710", "versions": [{"version": "Contact your AMD Customer Engineering representative", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI250", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI308X", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI300A", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI300X", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI325X", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Instinct\u2122 MI210", "versions": [{"version": "GIM Driver 8.4", "status": "unaffected"}]}], "datePublic": "2026-05-15T02:59:27.631Z", "descriptions": [{"lang": "en", "value": "A race condition in the MxGPU-Virtualization driver\u2019s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A race condition in the MxGPU-Virtualization driver\u2019s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.<br>"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "NONE", "baseScore": 2, "baseSeverity": "LOW"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "credits": [{"lang": "en", "value": "Reported through AMD Bug Bounty Program"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-15T11:13:09.310368Z", "id": "CVE-2025-52532", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T11:13:19.425Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-52532", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-15T11:13:09.310368Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-15T11:13:14.598Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "value": "Reported through AMD Bug Bounty Program"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 2, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "HIGH", "privilegesRequired": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "AMD", "product": "AMD Radeon\u2122 PRO V620", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Radeon\u2122 PRO V710", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI250", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI308X", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI300A", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI300X", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI325X", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}, {"vendor": "AMD", "product": "AMD Instinct\u2122 MI210", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}], "defaultStatus": "affected"}], "datePublic": "2026-05-15T02:59:27.631Z", "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"}], "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "descriptions": [{"lang": "en", "value": "A race condition in the MxGPU-Virtualization driver\u2019s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.", "supportingMedia": [{"type": "text/html", "value": "A race condition in the MxGPU-Virtualization driver\u2019s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"}]}], "providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-05-15T02:59:46.954Z"}}}, "cveMetadata": {"cveId": "CVE-2025-52532", "state": "PUBLISHED", "dateUpdated": "2026-05-15T11:13:19.425Z", "dateReserved": "2025-06-17T16:53:10.412Z", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "datePublished": "2026-05-15T02:59:46.954Z", "assignerShortName": "AMD"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "AMD Radeon\u2122 PRO V620", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}]}, {"defaultStatus": "affected", "product": "AMD Radeon\u2122 PRO V710", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "Contact your AMD Customer Engineering representative"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI250", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI308X", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI300A", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI300X", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI325X", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}, {"defaultStatus": "affected", "product": "AMD Instinct\u2122 MI210", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GIM Driver 8.4"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A race condition in the MxGPU-Virtualization driver\u2019s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context."}, {"lang": "es", "value": "Una condici\u00f3n de carrera en la ruta ioctl del controlador MxGPU-Virtualization causada por acceso concurrente no sincronizado a la variable global amdgv_cmd en un gestor ioctl desbloqueado podr\u00eda ser explotada por un atacante para desencadenar un desbordamiento de b\u00fafer basado en mont\u00edculo, resultando potencialmente en una denegaci\u00f3n de servicio dentro del contexto del sistema vulnerable."}], "id": "CVE-2025-52532", "lastModified": "2026-10-14T13:10:00.187", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.0, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52532", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-15T11:13:09.310368Z", "version": "2.0.3"}}]}, "published": "2026-05-15T05:16:32.890", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-367"}], "source": "psirt@amd.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI210", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi210", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI250", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi250", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI300A", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi300a", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI300X", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi300x", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI308X", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi308x", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "GIM Driver 8.4"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Instinct\u2122 MI325X", "source": "cna", "vendor": "AMD"}, "product": "instinct_mi325x", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "Contact your AMD Customer Engineering representative"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Radeon\u2122 PRO V620", "source": "cna", "vendor": "AMD"}, "product": "radeon_pro_v620", "vendor": "amd"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "Contact your AMD Customer Engineering representative"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 88.0, "source": "matching"}]}, "original": {"product": "AMD Radeon\u2122 PRO V710", "source": "cna", "vendor": "AMD"}, "product": "radeon_pro_v710", "vendor": "amd"}], "created": "2026-05-15T05:30:36.056046+00:00", "title": "Race Condition in AMD Instinct GPU Virtualization Driver Causes Heap\u2011Based Buffer Overflow and Denial of Service", "updated": "2026-05-15T11:15:25.889717+00:00", "vendors": ["amd", "amd$PRODUCT$instinct_mi210", "amd$PRODUCT$instinct_mi250", "amd$PRODUCT$instinct_mi300a", "amd$PRODUCT$instinct_mi300x", "amd$PRODUCT$instinct_mi308x", "amd$PRODUCT$instinct_mi325x", "amd$PRODUCT$radeon_pro_v620", "amd$PRODUCT$radeon_pro_v710"]}