Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2025-54509

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9004 Series Processors

Default version status: affected

  • GenoaPI_1.0.0.Hunaffected

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI_1.0.0.8unaffected

AMD AMD EPYC™ 8004 Series Processors

Default version status: affected

  • GenoaPI_1.0.0.Hunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 8004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 9005 Series Processors

Default version status: affected

  • EmbeddedTurinPI_SP5_1004unaffected

References