← CVE Intelligence

CVE-2025-61972

AMD / AMD EPYC™ 9004 Series Processors PUBLISHED

Description (CNA)

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.

Affected (CNA)

Vendor / productVersions
AMD / AMD EPYC™ 9004 Series Processorsunaffected GenoaPI_1.0.0.H
AMD / AMD EPYC™ 9005 Series Processorsunaffected TurinPI_1.0.0.8
AMD / AMD EPYC™ 8004 Series Processorsunaffected GenoaPI_1.0.0.H
AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")unaffected EmbGenoaPI-SP5 1.0.0.D
AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")unaffected EmbGenoaPI-SP5 1.0.0.D
AMD / AMD EPYC™ Embedded 8004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.D
AMD / AMD EPYC™ Embedded 9005 Series Processorsunaffected EmbeddedTurinPI_SP5_1004

CWE

CWE-1233

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.