CVE-2025-14304

Description

Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.twcert.org.tw/tw/cp-132-10578-c43b4-1.html ↗
• https://www.twcert.org.tw/en/cp-139-10579-9205b-2.html ↗
• https://www.asrock.com/support/Security.asp ↗
• https://www.asrockind.com/zh-tw/security-center ↗