CVE-2025-61971: AMD EPYC™ 9004 Series Processors, заобикаляне на вход

Описание

Оригинално описание

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

Засегнати продукти

• AMD AMD EPYC™ 9004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ 7003 Series Processors: MilanPI-SP3_1.0.0.J
• AMD AMD EPYC™ 9005 Series Processors: TurinPI_1.0.0.8
• AMD AMD EPYC™ 8004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ Embedded 7003 Series Processors: EmbMilanPI-SP3 1.0.0.D
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"): EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"): EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 8004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9005 Series Processors: EmbeddedTurinPI_SP5_1004

Вид слабост

• CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection

История

Други уязвимости в AMD AMD EPYC™ 9004 Series Processors

• 5.3CVE-2024-21944
• 4.0CVE-2025-54509
• 6.9CVE-2025-0045
• 8.5CVE-2026-0432
• 6.9CVE-2025-48521

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-61971
• https://nvd.nist.gov/vuln/detail/CVE-2025-61971
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html