Reported by 7 outlets
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories
Why this score
- Breadth
- 2.00 / 2.0 · 7 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 5.00 / 5.0 · CVSS + KEV signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Desk analysis
The September 9 roundup packages work that was mostly finished before it existed. AMD-SB-6034, dated September 8, covers CVE-2026-43603, a NULL pointer dereference (CVSS 6.9, CWE-476) in the AMD Linux GPU kernel driver that lets a local user crash the kernel through a graphics memory clear operation, but the fixes shipped in July: Radeon Software for Linux 26.13 on July 20 and Linux GPU Driver 31.40 on July 15 for Instinct MI210 through MI355X, with EPYC Embedded and Ryzen Embedded patches not due until October 2026. Arm's Mali GPU Driver Security Bulletin (article 111552) is dated September 8 and lists ten CVE ids across the Bifrost, Valhall, and 5th Gen GPU Architecture kernel and userspace drivers, one more than the roundup's nine. NVD records also dated September 8 name the two Triton Inference Server flaws the article left unidentified: CVE-2026-16497, excessive iteration to denial of service, and CVE-2026-47625, missing authorization at CVSS 7.5 leading to information disclosure, data tampering, and denial of service, affecting Triton for Linux through the 26.03 and 26.06 trains per Canada's AV26-900. None of the three vendors reports exploitation.
The reason this batch matters more than its DoS-heavy scoring suggests is that the three vendors bracket the AI compute stack: Triton serves inference, Instinct and Radeon accelerate it, Mali renders on the device edge. CVE-2026-47625 is the one to weight, because missing authorization on an inference server with data tampering in its impact list means an attacker who can reach the service can alter what the model reports, and downstream consumers treat those outputs as ground truth. Arm's CVE-2026-9034 and CVE-2026-11891 remove the local-user precondition entirely: they are reachable from a non-privileged process including via WebGL or WebGPU, so any web page is an attack vector against unpatched Mali devices. The affected tables make the breadth concrete: essentially every Ryzen, EPYC, Athlon, and Radeon line on Linux for AMD, and for Arm a Bifrost kernel driver affected from r12p0 onward with no vendor-neutral fixed version, which leaves that remediation entirely to device vendors.
Actions, in order of proof. On AMD Linux GPU hosts, verify the driver level: 26.13 or later Radeon Software, 31.40 or later on Instinct, and until the October embedded drop, restrict local users on EPYC Embedded and Ryzen Embedded systems, reviewing kernel crash traces on GPU compute nodes for crashes triggered by graphics memory clear operations. For Triton, inventory deployments including containers, move off the 26.03 and 26.06 trains to the September 2026 bulletin release, and restrict network reach to the inference service, since CVE-2026-47625 requires reaching it; treat unexplained writes or altered responses from inference endpoints as evidence of tampering, not just errors. For Mali, the fix is r56p0 or later kernel and userspace drivers, delivered through OS and device vendor updates, so the defender task is an inventory of Mali-based devices by GPU generation and driver level, with WebGL/WebGPU-capable browsers on unpatched units treated as exposed to CVE-2026-9034 and CVE-2026-11891.
Two developments would change this assessment. Scanning or exploitation telemetry against Triton endpoints would turn CVE-2026-47625 from patch hygiene into incident response, given how many inference servers sit flat on internal networks with no authentication tier in front of them. And October brings the test of whether the lagging tails close: AMD's EPYC Embedded and Ryzen Embedded fixes, and whether Mali device vendors actually ship r56p0, since a Bifrost fix that exists only at Arm and never reaches handsets leaves the oldest exposure standing.
Timeline
-
original reporting
Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories
securityweek.com · 34d ago · September 9th, 2026
Major chipmakers AMD, Arm, and Nvidia published new security advisories on Tuesday to notify customers of vulnerabilities recently discovered in their products. AMD announced fixes for CVE-2026-43603, a NULL pointer dereference flaw in its Linux GPU kernel driver that could lead to system crashes and a denial-of-service (DoS) condition. The company credited Maxime Rossi Bellom and Ramtine Tofighi Shirazi from SecMate for reporting the security defect. “According to the researchers’ report, when an application invokes a specific graphics memory management interface to perform a ‘clear’ operation under certain compute-processing conditions, the driver may fail to validate an internal data reference before use,” AMD notes in its advisory. The company rolled out fixes for EPYC Athlon, Ryzen, Radeon, and Instinct processors in July. It plans to release the patches for the EPYC Embedded and Ryzen Embedded processors in October. Arm published an advisory covering nine vulnerabilities in its Mali GPUs that could allow access to already freed memory or to sensitive kernel information, or could lead to a denial-of-service (DoS) condition. The company has released fixes for the Valhall GPU and Arm 5th Gen GPU Architecture kernel and userspace drivers. The Bifrost GPU kernel and userspace drivers are also affected. Nvidia announced a software update for the Triton Inference Server for Linux that resolves two high-severity security defects. The f
-
update from amd.com
Linux GPU Driver NULL Pointer Dereference (AMD-SB-6034)
amd.com · 36d ago · September 8th, 2026
AMD's bulletin for CVE-2026-43603, a NULL pointer dereference (CWE-476, CVSS 6.9) in the AMD Linux GPU kernel driver that lets a local user crash the kernel, is dated September 8, 2026 in its revision history (day precision). It shows the actual fixes shipped weeks earlier: Radeon Software for Linux 26.13 on 2026-07-20 for Ryzen, EPYC, Athlon, and Radeon lines, and Linux GPU Driver 31.40 on 2026-07-15 for Instinct MI210 through MI355X, with EPYC Embedded and Ryzen Embedded mitigations targeted for October 2026.
-
update from support.arm.com
Mali GPU Driver Security Bulletin (Article ID 111552)
support.arm.com · 36d ago · September 8th, 2026
Arm's Mali GPU bulletin, initially released September 8, 2026 (day precision), lists ten CVE ids across the Bifrost, Valhall, and Arm 5th Gen GPU Architecture kernel and userspace drivers, mostly use-after-free and kernel information disclosure classes. CVE-2026-9034 and CVE-2026-11891 are reachable from a non-privileged process including via WebGL or WebGPU. Fixes are in r56p0 and above for Valhall and 5th Gen Architecture, while the Bifrost kernel driver (affected from r12p0 onward) has no vendor-neutral fixed version listed.
-
update from nvd.nist.gov
CVE-2026-16497 (NVIDIA Triton Inference Server for Linux)
nvd.nist.gov · 35d ago · September 8th, 2026
NVD record published September 8, 2026 for an NVIDIA Triton Inference Server for Linux flaw where excessive iteration can be triggered by an attacker, leading to denial of service. Scored CVSS 7.5 HIGH. This is the first of the two high-severity Triton defects referenced in the SecurityWeek roundup.
-
update from nvd.nist.gov
CVE-2026-47625 (NVIDIA Triton Inference Server for Linux)
nvd.nist.gov · 35d ago · September 8th, 2026
Scored CVSS 7.5 HIGH. Canada's CCCS advisory AV26-900 lists affected Triton versions through the 26.03 and 26.06 trains.
-
update from malware.news
NVIDIA security advisory (AV26-900)
malware.news · 34d ago · September 9th, 2026
Serial Number: AV26-900 Date: September 9, 2026 As of September 8, 2026, NVIDIA is affected by vulnerabilities in the following product: Triton Inference Server Versions 0.0 to 26.03 Versions 0.0 to 26.06 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
-
update from support.broadcom.com
Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https:// support.broadcom.com/web/ecx/s ecurity-ad
support.broadcom.com · 34d ago · September 9th, 2026
Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https:// support.broadcom.com/web/ecx/s ecurity-ad
via Mastodon https://support.broadcom.com/web/ecx/security-advisory
-
update from securityonline.info
Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy r
securityonline.info · 34d ago · September 9th, 2026
Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy r
via Mastodon https://securityonline.info/cisco-fmc-vulnerabilities-exploited/?utm_source=mastodon&utm_medium=jetpack_social
-
update from www.securityweek.com
🔒 Security News Digest - 2026-09-09 📊 8 updates from 3 sources: 🔹 SecurityWeek: Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Adv
www.securityweek.com · 34d ago · September 9th, 2026
🔒 Security News Digest - 2026-09-09 📊 8 updates from 3 sources: 🔹 SecurityWeek: Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Adv
via Mastodon https://www.securityweek.com/chipmaker-patch-tuesday-nvidia-amd-arm-issue-security-advisories/