PatchTheCVErocm vulnerabilities and fixes
Recent CVEs affecting rocm, with upgrade or downgrade steps. 2 tracked.
rocm has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-11. Highest priority: CVE-2023-31324 (score 28/100).
- CVE-2023-31324 HIGH 7.8 UPGRADE UPGRADE A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker
- CVE-2023-20548 HIGH 7.8 UPGRADE UPGRADE A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker
FAQ
How do I fix rocm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rocm being exploited right now?
None of the tracked rocm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rocm CVE should I patch first?
CVE-2023-31324 currently ranks highest (28/100): A Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow an attacker .