Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-0032

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of int

Description

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI 1.0.0.4unaffected

AMD AMD Ryzen™ AI 300 Series Processors

Default version status: affected

  • StrixKrackanPI-FP8_1.1.0.1bunaffected

AMD AMD Ryzen™ 9000 Series Desktop Processors

Default version status: affected

  • ComboAM5PI 1.2.0.3cunaffected

AMD AMD Ryzen™ 9000HX Series Processors

Default version status: affected

  • FireRangeFL1PI 1.0.0.0aunaffected

AMD AMD Ryzen™ Al Max+

Default version status: affected

  • StrixHaloPI-FP11_1.0.0.1unaffected

AMD AMD Ryzen™ Threadripper™ 9000 series

Default version status: affected

  • ShimadaPeakPI-SP6 1.0.0.1unaffected

AMD AMD EPYC™ Embedded 9000 Series Processors

Default version status: affected

  • Embturin PI 1.0.0.0unaffected

References