Към съдържанието
Търсене

CVE-2025-54518: AMD EPYC™ 7002 Series Processors, логическа грешка

7.3

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Засегнати продукти

  • AMD AMD EPYC™ 7002 Series Processors: os kernel
  • AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics: RenoirPI-FP6_1.0.0.Ed
  • AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics: MendocinoPI-FT6_1.0.0.7f
  • AMD AMD Ryzen™ 3000 Series Desktop Processors: ComboAM4v2 1.2.0.10
  • AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors: ChagallWSPI-sWRX8-1.0.0.D
  • AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6_1.0.1.1d
  • AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors: CastlePeakWSPI-sWRX8 1.0.0.I
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6_1.0.1.1d
  • AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics: CezannePI-FP6_1.0.1.1d
  • AMD AMD Ryzen™ 4000 Series Desktop Processors: ComboAM4v2 1.2.0.10
  • AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics: ComboAM4v2 1.2.0.10
  • AMD AMD Ryzen™ 3000 Series Desktop Processors: ComboAM4PI 1.0.0.10
  • AMD AMD EPYC™ Embedded 7002 Series Processors: OS kernel
  • AMD AMD Ryzen Embedded V2000A Series Processors: EmbeddedV2KAPI-FP6 1.0.0.A
  • AMD AMD Ryzen™ Embedded V2000 Series Processors: EmbeddedPI-FP6_1.0.0.D
  • Red Hat Red Hat Enterprise Linux 8: 0:4.18.0-553.153.1.rt7.494.el8_10 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:4.18.0-305.201.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:4.18.0-305.201.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:4.18.0-372.206.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:4.18.0-372.206.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:4.18.0-477.159.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:4.18.0-477.159.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:5.14.0-687.38.1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:5.14.0-427.145.1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:5.14.0-570.134.1.el9_6 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202608241157-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202609011112-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202608250221-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202608182320-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 4.20.9.6.202608181658-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 4.21.9.6.202608180431-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.22: 4.22.9.8.202608130832-0 преди *
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux for NVIDIA 26
  • Red Hat Red Hat OpenShift Container Platform 4

Вид слабост

История

  • 15 май 2026 Публикувано

Други уязвимости в AMD AMD EPYC™ 7002 Series Processors

Първоизточници

CVE-2025-54518: AMD EPYC™ 7002 Series Processors, логическа грешка | freedomonline.bg