AMD, Arm, and Nvidia Fix Security Flaws in Graphics and AI Chips
Three of the world's biggest chipmakers released patches this week for flaws that could let attackers crash systems or quietly read private data. Here is what each company fixed and who needs to act.
Key points
- AMD patched CVE-2026-43603, a flaw in its Linux graphics driver that could crash affected computers, with fixes already out for EPYC, Ryzen, and Radeon chips as of July 2026.
- Arm fixed nine separate vulnerabilities in its Mali GPU drivers, covering flaws that could expose private data or cause system crashes.
- Nvidia released a software update for its Triton Inference Server, resolving two high-severity issues including one that could allow outsiders to read or alter data.
- Researchers Maxime Rossi Bellom and Ramtine Tofighi Shirazi of SecMate discovered and reported the AMD flaw.
Three chipmakers, one Tuesday, a fistful of patches. AMD, Arm, and Nvidia each published security advisories this week, covering flaws in the graphics and AI processing chips that power everything from gaming laptops to hospital data servers.
What did each company actually fix?
AMD's fix addresses CVE-2026-43603, a bug in the Linux graphics driver for its GPUs. A GPU, or graphics processing unit, is the chip that handles images and increasingly powers AI workloads. The flaw is called a "NULL pointer dereference", meaning the driver tries to use a piece of data before checking whether that data exists. The result: the computer can crash entirely, a condition known as a denial-of-service, where the machine becomes unresponsive.
SecMate researchers Maxime Rossi Bellom and Ramtine Tofighi Shirazi found the bug. AMD rolled out patches for its EPYC, Athlon, Ryzen, Radeon, and Instinct product lines in July. Fixes for EPYC Embedded and Ryzen Embedded chips are due in October.
| Product line | Fix available |
|---|---|
| AMD EPYC, Athlon, Ryzen, Radeon, Instinct | July 2026 |
| AMD EPYC Embedded, Ryzen Embedded | October 2026 (planned) |
| Arm Valhall GPU, Arm 5th Gen GPU | Now |
| Arm Bifrost GPU | Now |
| Nvidia Triton Inference Server (Linux) | Now |
Arm published a broader advisory covering nine vulnerabilities in its Mali GPU drivers, the software layer that lets a chip talk to an operating system. The flaws could allow a malicious program to access memory that has already been released (think of a filing cabinet drawer that was emptied but not locked, and someone else rifles through it) or to read sensitive internal system information. Arm has issued fixes for its Valhall and 5th Gen GPU drivers, as well as its older Bifrost line.
Nvidia's update targets its Triton Inference Server, a piece of software companies use to run AI models at scale on Linux systems. Two high-severity flaws were fixed: one that could crash the server outright, and a second that could allow an attacker to read private data, alter it, or bring the server down.
Should ordinary people be worried?
Directly, most consumers are not at immediate personal risk. These flaws sit deep inside driver and server software, and exploiting them generally requires an attacker to already have some access to the affected system. The bigger concern is for IT teams running AMD-powered Linux servers, cloud infrastructure using Arm chips, or AI pipelines built on Nvidia's Triton.
If your organisation uses any of these products, check with your IT department that the relevant patches have been applied. For AMD's embedded chip lines, note that the wait for an October patch is real, and interim mitigations may be needed. First reported by SecurityWeek, the advisories carry no confirmed reports of active exploitation at the time of publishing.
Common questions
Do I need to do anything if I just have an AMD or Nvidia graphics card in my home PC?
Probably not right away. The AMD flaw is in a Linux driver, so Windows home users are not affected by this particular bug. Keep your drivers updated as a general habit, using the chipmaker's official software.
What is a patch, and how do I get one?
A patch is a small software update that fixes a specific flaw. For servers and business systems, IT teams apply these centrally. For personal devices, enabling automatic updates in your operating system settings handles most patches without any action needed from you.
