CVE-2022-23817

Published: Aug 13, 2024

Modified: May 15, 2026

PUBLISHED

Description

Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation.

Vendor	Product	Versions
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	unaffected `PicassoPI-FP5 1.0.0.E`
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	unaffected `ChagallWSPI-sWRX8 1.0.0.5` unaffected `CastlePeakWSPI-sWRX8 1.0.0.A`
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	unaffected `ComboAM4v2 PI 1.2.0.8`
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	unaffected `ChagallWSPI-sWRX8 1.0.0.5`
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	unaffected `RenoirPI-FP6 1.0.0.A`
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	unaffected `PicassoPI-FP5 1.0.0.E`
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	unaffected `CezannePI-FP6 1.0.0.C`
AMD	AMD Ryzen™ 3000 Series Desktop Processors	unaffected `ComboAM4V1 1.0.0.A` unaffected `ComboAM4V2 1.2.0.9`
AMD	AMD Ryzen™ 2000 Mobile Processors	unaffected `ComboAM4v2 PI 1.2.0.8` unaffected `ComboAM4PI 1.0.0.9`
AMD	AMD Ryzen™ 4000 Series Desktop Processors	unaffected `ComboAM4v2 PI 1.2.0.8`
AMD	AMD Ryzen™ 5000 Series Desktop Processors	unaffected `ComboAM4v2 PI 1.2.0.8`
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	unaffected `RembrandtPI-FP7_1.0.0.5`
AMD	AMD Ryzen™ Embedded R1000 Series Processors	unaffected `EmbeddedPI-FP5_1.2.0.A`
AMD	AMD Ryzen™ Embedded R2000 Series Processors	unaffected `EmbeddedR2KPI-FP5 1.0.0.2`
AMD	AMD Ryzen™ Embedded 5000 Series Processors	unaffected `EmbAM4PI 1.0.0.2`
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	unaffected `EmbeddedPI-FP5_1.2.0.A`
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Picasso")	unaffected `EmbeddedPI-FP5_1.2.0.A`
AMD	AMD Ryzen™ Embedded V2000 Series Processor	unaffected `EmbeddedPI-FP6_1.0.0.8`
AMD	AMD Ryzen™ Embedded V3000 Series Processors	unaffected `EmbeddedPI-FP7r2_1002`
AMD	AMD Radeon™ RX 5000 Series Graphics Products	unaffected `AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)`
AMD	AMD Radeon™ PRO W5000 Series Graphics Products	unaffected `AMD Software: PRO Edition 22.Q2 (22.10.20)`
AMD	AMD Radeon™ RX 6000 Series Graphics Products	unaffected `AMD Software: Adrenalin Edition 22.5.2 (22.10.17.01)`
AMD	AMD Radeon™ PRO W6000 Series Graphics Products	unaffected `AMD Software: PRO Edition 22.Q2 (22.10.20)`
AMD	MI-25 / 50	unaffected `No fix planned`
AMD	MI-100	unaffected `ROCm 6.4.2`
AMD	AMD Instinct™ MI250	unaffected `ROCm 7.0`
AMD	AMD Instinct™ MI210	unaffected `ROCm 7.0`