← CVE Intelligence

CVE-2025-54518

AMD / AMD EPYC™ 7002 Series Processors PUBLISHED

Description (CNA)

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Affected (CNA)

Vendor / productVersions
AMD / AMD EPYC™ 7002 Series Processorsunaffected os kernel
AMD / AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphicsunaffected RenoirPI-FP6_1.0.0.Ed
AMD / AMD Ryzen™ 7020 Series Processors with Radeon™ Graphicsunaffected MendocinoPI-FT6_1.0.0.7f
AMD / AMD Ryzen™ 3000 Series Desktop Processorsunaffected ComboAM4v2 1.2.0.10
AMD / AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processorsunaffected ChagallWSPI-sWRX8-1.0.0.D
AMD / AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphicsunaffected CezannePI-FP6_1.0.1.1d
AMD / AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processorsunaffected CastlePeakWSPI-sWRX8 1.0.0.I
AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphicsunaffected CezannePI-FP6_1.0.1.1d
AMD / AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphicsunaffected CezannePI-FP6_1.0.1.1d
AMD / AMD Ryzen™ 4000 Series Desktop Processorsunaffected ComboAM4v2 1.2.0.10
AMD / AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphicsunaffected ComboAM4v2 1.2.0.10
AMD / AMD Ryzen™ 3000 Series Desktop Processorsunaffected ComboAM4PI 1.0.0.10
AMD / AMD EPYC™ Embedded 7002 Series Processorsunaffected OS kernel
AMD / AMD Ryzen Embedded V2000A Series Processorsunaffected EmbeddedV2KAPI-FP6 1.0.0.A
AMD / AMD Ryzen™ Embedded V2000 Series Processorsunaffected EmbeddedPI-FP6_1.0.0.D

CWE

CWE-1189

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in AMD Zen 2-based processors, affecting components such as the kernel and Xen hypervisor. Improper isolation of shared resources within the CPU operation cache could allow an attacker to corrupt instructions executed at a different privilege level. This could potentially result in privilege escalation, granting an attacker higher system access than intended.