Skip to content
fr Sign in
8.5 High

CVE-2025-61972 Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System…

Description

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 9004 Series Processors Versions not published
AMD EPYC™ 9005 Series Processors Versions not published
AMD EPYC™ 8004 Series Processors Versions not published
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") Versions not published
AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") Versions not published
AMD EPYC™ Embedded 8004 Series Processors Versions not published
AMD EPYC™ Embedded 9005 Series Processors Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 9004 Series Processors

The 31 CVEs of AMD EPYC™ 9004 Series Processors →
CVE-2025-54509 Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a… 4.0 Medium CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-61971 Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing… 5.9 Medium
Track this CVE