CVE-2024-36353 - CVE House
Back to Database
Status published Medium CVE-2024-36353

Insufficient clearing of GPU global memory could allow a malicious...

Vulnerability Description

Insufficient clearing of GPU global memory could allow a malicious process running on the same GPU to read left over memory values potentially leading to loss of confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-36353

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processor, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 9000HX Series Processors, AMD Ryzen™ AI Max 300 Series Processors, AMD Ryzen™ Z2 Series Processors Extreme, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 9000 Series Desktop Processors, Ryzen™ Embedded R1000, Ryzen™ Embedded R2000, AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge"), Ryzen™ Embedded V2000, Ryzen™ Embedded V3000, AMD Ryzen Embedded V2000A Series Processors, AMD Radeon™ RX 5000/PRO W5000 Series Graphics Products, AMD Radeon™ RX6000/PRO W6000 Series Graphics Products, AMD Radeon™ RX 7000/PRO W7000 Series Graphics Products, AMD Radeon™ PRO V520, AMD Radeon™ PRO V620, AMD Radeon™ PRO V710
Vulnerable Versions:
Radeon Software For Linux 25.10.1, Kernel 6.12.25 LTS, Contact your AMD Customer Engineering representative

Timeline

Official Publish: March 2nd, 2025
Last Modified: October 14th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.