AMD AMD Instinct™ MI250X

• CVE-2026-43603 Medium 6.9 A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service. 0.2%
• CVE-2026-43598 High 7.7 Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, poten 0.3%
• CVE-2026-0481 Critical 9.2 Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in los 0.3%