CVE-2026-0428: TEE SOC Driver Sanitation Flaw Allows Unauthorized Reg Write
CVE-2026-0428 Published on May 15, 2026

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid data to a remote Die, potentially resulting in unexpected behavior.

NVD

Vulnerability Analysis

CVE-2026-0428 is exploitable with local system access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE

Weakness Type

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.


Affected Versions

AMD Instinct™ MI300A: AMD Instinct™ MI300X: AMD Instinct™ MI308X: AMD Instinct™ MI325X:

Exploit Probability

EPSS
0.10%
Percentile
1.07%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.