Insufficient parameter sanitization in AMD’s TEE SOC driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS command that writes invalid data to a remote die, potentially causing unexpected hardware behavior or system instability. The flaw is classified as CWE‑1284 and could affect the confidentiality, integrity, or availability of the GPU subsystem.

AMD Instinct™ MI300A, MI300X, MI308X, and MI325X GPUs are impacted. Any system running those accelerators without an appropriate update may be vulnerable.

The CVSS score of 1.8 indicates a low severity issue. EPSS data is unavailable and the vulnerability is not listed in CISA’s KEV catalog. Because the attack requires sending a malformed driver command, the likely vector is a local or privileged user or a compromised application, rather than a remote attacker.