The vulnerability is an improper cleanup of shared register resources in AMD GPU firmware, falling under CWE-459. An administrator‑privileged attacker running inside one Guest Virtual Machine can read or otherwise manipulate the register resources of another Guest VM. This can lead to loss of confidentiality, integrity, or availability across virtual guests.

The flaw affects AMD Instinct MI210, AMD Instinct MI300X, AMD Instinct MI325X, and AMD Radeon PRO V710 GPUs. No specific firmware revision information is supplied, so any firmware that did not implement the fix is potentially vulnerable.

The CVSS score of 4.6 indicates moderate severity. EPSS data is unavailable and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires an admin‑level user inside a Guest VM and knowledge of the shared register mechanism, so while the likelihood is not high, the constrained attack surface gives the attacker meaningful access to data from other guests.