CVE-2025-62627 — AMD / ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products

CVE-2025-62627

AMD / ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products PUBLISHED

Description (CNA)

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.

Affected (CNA)

Vendor / product	Versions
AMD / ESXi 8.x and ESXi 9.x hosts using AMD-Pensando DPU products	unaffected ESXi 8.0U3i, included in VCF 5.2.3.0 or 9.0.2 releases

CWE

CWE-822

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-2001.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.