Vulnerability details

CVE-2026-0481

CVSS 4.0

9.2Critical

Official description

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially resulting in loss of availability

CVSS scores

Score	Version	Source	Vector
9.2Critical	4.0	CVEProject cvelistV5 (CNA) (AMD)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H`

Affected products

Vendor	Product	Versions	Source
No product information recorded.

References and advisories

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6031.html

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-05-15
Last updated: 2026-05-15
State: Published
Assigner (CNA): AMD

Exploit prediction (EPSS)

0.3%

Probability of exploitation in 30 days

23.6%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-1327
Binding to an Unrestricted IP Address