CVE-2023-31308

Awaiting Analysis Awaiting Analysis - Queue

Denial of Service in AMD SMU via Virtual Function

Publication date: 2026-08-31

Last updated on: 2026-09-03

Assigner: Advanced Micro Devices Inc.

Description

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-31

Last Modified

2026-09-03

Generated

2026-09-21

AI Q&A

2026-08-31

EPSS Evaluated

2026-09-15

NVD

CVE-2023-31308

EUVD

EUVD-2023-60610

Affected Vendors & Products

Vendor	Product	Version / Range
amd	radeon_pro_w7000_series_graphics_products	23.40.20
amd	amd_software_pro_edition	24.q1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-129	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

Executive Summary

This vulnerability involves a malicious virtual function triggering specific command handlers in the SMU, leading to an out-of-bounds memory read. This can cause a denial of service by crashing the system or making it unstable.

Detection Guidance

This vulnerability cannot be directly detected with commands as it involves a malicious virtual function exploiting AMD SMU command handlers. Monitoring system logs for crashes or memory errors in AMD Radeon PRO W7000 Series Graphics Products may indicate potential exploitation. Ensure the latest AMD Software: PRO Edition (24.Q1 or later) is installed to mitigate risks.

Impact Analysis

The impact includes system crashes or instability due to memory corruption. An attacker could exploit this to disrupt services or cause unexpected behavior on affected systems.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability primarily causes a denial of service due to out-of-bounds memory read, which may affect system availability but lacks explicit details on data confidentiality or integrity risks required for compliance assessments.

Mitigation Strategies

Apply the latest firmware updates from AMD to patch the SMU command handler vulnerability. Monitor AMD security advisories for patches and disable unnecessary virtual functions if possible.

Hi! I’m here to help you understand CVE-2023-31308. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70