CVE-2025-61972: AMD EPYC™ 9004 Series Processors, заобикаляне на вход

Описание

Оригинално описание

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.

Засегнати продукти

• AMD AMD EPYC™ 9004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ 9005 Series Processors: TurinPI_1.0.0.8
• AMD AMD EPYC™ 8004 Series Processors: GenoaPI_1.0.0.H
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"): EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"): EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 8004 Series Processors: EmbGenoaPI-SP5 1.0.0.D
• AMD AMD EPYC™ Embedded 9005 Series Processors: EmbeddedTurinPI_SP5_1004

Вид слабост

• CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection

История

Други уязвимости в AMD AMD EPYC™ 9004 Series Processors

• 4.0CVE-2025-54509
• 6.9CVE-2025-0045
• 8.5CVE-2026-0432
• 6.9CVE-2025-48521
• 7.0CVE-2025-48512

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-61972
• https://nvd.nist.gov/vuln/detail/CVE-2025-61972
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html