Race Condition Vulnerability in AMD Graphics Products
CVE-2022-23826

1.8LOW

Key Information:

Vendor

Amd
Status
Amd Ryzen™ 3000 Series Mobile Processors With Radeon™ Graphics
Amd Athlon™ 3000 Series Mobile Processors With Radeon™ Graphics
Amd Athlon™ 3000 Series Desktop Processors With Radeon™ Graphics
Amd Ryzen™ Embedded R1000 Series Processors
Vendor
CVE Published:
15 May 2026

What is CVE-2022-23826?

A time-of-check to time-of-use (TOCTOU) vulnerability in AMD's graphics interface could allow attackers to exploit a race condition. This may enable them to manipulate registers, potentially leading to significant integrity issues within the graphics processing ecosystem. Users of affected AMD products should remain vigilant and apply necessary security updates to safeguard systems against potential exploitation.

Affected Version(s)

AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics ComboAM4v2 PI 1.2.0.8

AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics PicassoPI-FP5 1.0.0.E

AMD Instinct™ MI210 ROCm 6.4.2

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
1.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.