This vulnerability involves insufficient parameter sanitization in the TEE SOC Driver of the AMD Instinct™ MI300A. An attacker with high privileges can issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REG command, which may write invalid data to a remote Die. This improper validation could lead to unexpected behavior in the affected hardware. The CVSS 4.0 vector indicates local attack vector, high attack complexity, no user interaction, and low impact on availability. No patch or official remediation level has been disclosed by AMD at this time.

The impact is limited due to the requirement for high privileges and high attack complexity. The vulnerability could cause unexpected behavior by writing invalid data to a remote Die, but no further impact such as privilege escalation or denial of service is indicated. There are no known exploits in the wild, and the CVSS score reflects a low severity level.

Patch status is not yet confirmed — check the AMD vendor advisory for current remediation guidance. Since no official fix or remediation level has been published, users should monitor AMD advisories for updates. Given the high privilege requirement, limiting access to trusted administrators may reduce risk.