CVE-2026-0481 is a vulnerability classified under CWE-1327 (Binding to an Unrestricted IP Address) affecting the AMD Device Metrics Exporter within the ROCm ecosystem on AMD Instinct™ MI210 GPUs. The issue allows remote attackers to connect to the service bound to an unrestricted IP address, enabling unauthorized modifications to GPU configuration settings. This can result in denial of service or loss of availability of the GPU resources. The vulnerability is remotely exploitable without authentication or user interaction, with a critical severity score of 9.2 under CVSS 4.0. No patch or official remediation level has been published by AMD as of the current advisory status.

The vulnerability allows remote attackers to perform unauthorized changes to the GPU configuration, potentially causing loss of availability of the AMD Instinct™ MI210 GPU. This could disrupt services or workloads relying on the GPU, impacting system stability and performance. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict network access to the AMD Device Metrics Exporter service to trusted hosts only and monitor for unusual activity related to GPU configuration changes. Avoid exposing the service to untrusted networks.