CVE-2025-54510: AMD EPYC™ 9004 Series Processors, състезание за ресурс

Описание

Оригинално описание

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

Засегнати продукти

• AMD AMD EPYC™ 9004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ 7003 Series Processors: MilanPI-SP3_1.0.0.J
• AMD AMD EPYC™ 9005 Series Processors: TurinPI_1.0.0.8
• AMD AMD EPYC™ 8004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ Embedded 7003 Series Processors: EmbMilanPI-SP3 1.0.0.D
• AMD AMD EPYC™ Embedded 9004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 8004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9005 Series Processors: EmbeddedTurinPI_SP5_1004

Вид слабост

• CWE-414 Липсваща проверка за заключване

История

Други уязвимости в AMD AMD EPYC™ 9004 Series Processors

• 5.3CVE-2024-21944
• 4.0CVE-2025-54509
• 6.9CVE-2025-0045
• 8.5CVE-2026-0432
• 6.9CVE-2025-48521

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-54510
• https://nvd.nist.gov/vuln/detail/CVE-2025-54510
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3034.html