Improper Input Validation Vulnerability in AMD ROCm Communication Collectives Library

CVE-2026-43598

What is CVE-2026-43598?

An improper input validation issue has been identified in the AMD ROCm Communication Collectives Library (RCCL). This vulnerability could allow a malicious actor, by exploiting a compromised peer rank or through a network-adjacent attack, to dereference an attacker-controlled pointer. This could potentially lead to unauthorized remote code execution, posing significant security risks for affected systems. Users and administrators are advised to review their implementations and apply necessary mitigations as detailed in the official advisory.

References