CVE-2026-28237: Medium severity AMD AMD uProf vulnerability
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
amd/uProffrom your environment.Uninstall AMD uProf from systems where it is not required to eliminate the attack surface for unrestricted resource allocation.
- Configuration
Configure OS-level resource limits for the AMD uProf process (for example using ulimit, systemd resource directives, or cgroups) to cap CPU, memory and file descriptors and prevent excessive resource consumption.
AMD uProf process_resource_limits = apply OS-level limits (ulimit/cgroups) - Compensating control
Restrict access to AMD uProf to trusted users and networks and limit who can execute or upload profiling workloads to reduce the risk of exploitation that could consume system resources.
- Operational
Monitor AMD uProf processes for abnormal or sustained spikes in CPU, memory, or other resource usage; create alerts and procedures to terminate, isolate, or restart offending processes and perform post-incident analysis.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28237?
The severity of CVE-2026-28237 is medium, with a CVSS score of 6.8.
How do I fix CVE-2026-28237?
To fix CVE-2026-28237, ensure you apply the latest updates and patches provided by AMD for AMD uProf.
What systems are affected by CVE-2026-28237?
CVE-2026-28237 affects systems running AMD uProf.
What could happen if CVE-2026-28237 is exploited?
If exploited, CVE-2026-28237 could lead to excessive resource consumption, resulting in a loss of system availability.
Is CVE-2026-28237 considered critical?
No, CVE-2026-28237 is categorized as a medium severity vulnerability.