by Kastro
Paper/Archive/CVE-2026-0481

CVE-2026-0481

AMD AMD Instinct™ MI210 — Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized…

EPSS 0.3%CVSS 9.2
critical.is priorityof 100
32
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 23.6.236 × 204.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

Affected

ProductAffectedFixed inSource
AMD Instinct™ MI210see advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI250see advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI300Asee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI300Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI325Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI350Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI355Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI308Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA
AMD Instinct™ MI250Xsee advisoryDME v1.4.1.2 and v1.4.0.1CNA

Scores by source

AMD (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refamd.com/en/resources/product-security/bulletin/AMD-SB-6031.html