Improper Access Control in AMD Versal AI Edge Series XPPU

Executive Summary

This vulnerability affects the Versal AI Edge Series Gen 2 and Prime Series Gen 2 Peripheral Protection Unit (XPPU) for inter-processor interrupt (IPI) buffers. Due to a silicon-level timing mismatch, the XPPU fails to block unauthorized access to IPI message buffers and control registers. Specifically, a one-cycle latency error allows processors with any IPI channel access to read and write to the entire IPI buffer register space and no-buffer control registers.

Useful 0 Not Useful 0

Detection Guidance

Detection requires checking for unauthorized access attempts to IPI buffer registers. Monitor system logs for unexpected processor access patterns or errors related to XPPU violations. Use hardware debug tools to inspect IPI buffer register accesses.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthorized processors to read and write to IPI buffer registers and control spaces, potentially leading to data leaks, corruption, or system instability. It could enable privilege escalation or unauthorized access to sensitive data in systems using affected AMD Versal AI Edge and Prime Series Gen 2 SoCs.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating confidentiality and integrity requirements in GDPR and HIPAA. Organizations using affected AMD SoCs may face compliance risks due to potential data breaches or unauthorized system access.

Useful 0 Not Useful 0

Mitigation Strategies

Configure the global IPI XPPU to trigger a soft reset (SRST) for any processor attempting unauthorized access. Apply the mitigation using the Vivado Advanced Configuration Editor for version 2026.1 or later.

Useful 0 Not Useful 0