Loading story…
The Canadian Centre for Cyber Security and Guyana National CIRT issued alerts about an AMD RCCL vulnerability affecting nine AMD Instinct accelerator models running ROCm versions earlier than 7.14. The affected models are MI210, MI250, MI250X, MI300A, MI300X, MI308X, MI325X, MI350X, and MI355X. Canada's advisory AV26-1014 and Guyana's notice reference AMD security information, with the latter identifying bulletin AMD-SB-6033.
Both agencies recommend that users and administrators review the linked AMD security guidance and apply necessary updates as they become available. Organizations operating affected accelerators should identify deployed ROCm versions and assess update requirements against AMD's bulletin. The notices do not provide a CVE identifier, severity rating, technical impact, or exploitation status, leaving the vulnerability's operational risk unspecified.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
Guyana National CIRT issued an AMD security notice dated October 8, 2026, citing AMD-SB-6033 and Canadian advisory AV26-1014. It recommended that users and administrators review the updates and apply them where necessary.
The Canadian Centre for Cyber Security issued advisory AV26-1014 covering the nine affected AMD Instinct models and recommending that users review the linked security resources and apply necessary updates as they become available. The notice did not specify CVEs, severity, technical impact, or exploitation status.
AMD published a security advisory dated October 6, 2026, identifying an RCCL vulnerability affecting Instinct MI210, MI250, MI250X, MI300A, MI300X, MI308X, MI325X, MI350X, and MI355X running ROCm versions earlier than 7.14. The referenced bulletin is AMD-SB-6033.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cirt.gy
Open sourcemalware.news
Open sourcecyber.gc.ca
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AMD issued a security advisory covering vulnerabilities in multiple Windows and FPGA-related software products, including **AMD Power Design Manager**, **AMD Ryzen Master**, **AMD Ryzen Master SDK** components, the **Vitis Libraries Security Module**, **Vitis Embedded Single File Download for Windows**, and the **Vitis Unified Installer** for FPGAs and Adaptive SoCs on Windows. The advisory indicates that affected versions include all releases except the specific fixed versions identified by AMD, making the notice broadly relevant to enterprises using AMD management, development, or deployment tooling. Guyana's National CIRT circulated the advisory and urged users and administrators to review AMD's guidance and apply the necessary updates. The available reporting describes the notice as a mitigation and patching advisory rather than evidence of active exploitation, but organizations running the listed AMD software are being told to verify versions and move to the vendor-designated remediated releases.
Aug 14, 2026
AMD disclosed vulnerabilities affecting a broad range of processor, graphics, and accelerator products, including **EPYC**, **Ryzen**, **Athlon**, **Threadripper**, **Instinct MI300A**, and **Radeon PRO V620** lines. The issues are tracked through AMD’s processor-vulnerability security resources, including bulletin `AMD-SB-7009`; public advisories did not specify vulnerability types, exploit conditions, or evidence of active exploitation. Organizations should inventory affected AMD-based servers, desktops, mobile systems, embedded devices, workstations, and accelerators, then obtain and deploy the applicable platform-initialization (PI) firmware updates from their OEM or AMD. Administrators should verify that deployed firmware meets AMD’s published minimum non-affected versions; **Radeon PRO V620** customers should contact AMD Customer Engineering for remediation guidance.
Sep 3, 2026
**CVE-2023-52817** is a moderate-severity flaw in the Linux kernel's AMDGPU DRM driver. On affected GPUs, including VEGA20, a low-privileged local user can read the `amdgpu_regs_smc` debugfs file while the `smc_rreg` pointer is NULL, triggering a NULL-pointer dereference in `amdgpu_debugfs_regs_smc_read` and causing a kernel oops or system crash. Red Hat rates the local denial-of-service issue CVSS 3.1 5.5. The vulnerability is fixed in Linux stable releases 4.19.300, 5.4.262, 5.10.202, 5.15.140, 6.1.64, 6.5.13, 6.6.3, and 6.7 and later. Red Hat issued standard-kernel fixes for RHEL 8 and RHEL 9, plus the RHEL 8 real-time kernel, through advisories including RHSA-2024:7000, RHSA-2024:7001, and RHSA-2024:9315; RHEL 9 `kernel-rt` was listed as affected. Administrators should deploy the latest vendor-supported kernel update rather than backporting individual patches.
Aug 26, 2026