Vulnerability · Published May 15, 2026 · Assigned by AMD

CVE-2025-52532

Low 2.0

In plain English

A low-severity security flaw in AMD Instinct™ MI210 from AMD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).

Severity (CVSS 4.0)2.0Low
Exploit odds (30 days)<0.1%top 100.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handler could be exploited by an attacker to trigger a heap-based buffer overflow, potentially resulting in denial-of-service within the vulnerable system context.

Affected products (as reported)

VendorProductVersions
AMD AMD Radeon™ PRO V620 see references
AMD AMD Radeon™ PRO V710 see references
AMD AMD Instinct™ MI250 see references
AMD AMD Instinct™ MI308X see references
AMD AMD Instinct™ MI300A see references
AMD AMD Instinct™ MI300X see references
AMD AMD Instinct™ MI325X see references
AMD AMD Instinct™ MI210 see references

Weakness: CWE-367 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

References