Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-54510

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-ba

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9004 Series Processors

Default version status: affected

  • GenoaPI_1.0.0.Hunaffected

AMD AMD EPYC™ 7003 Series Processors

Default version status: affected

  • MilanPI-SP3_1.0.0.Junaffected

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI_1.0.0.8unaffected

AMD AMD EPYC™ 8004 Series Processors

Default version status: affected

  • GenoaPI_1.0.0.Hunaffected

AMD AMD EPYC™ Embedded 7003 Series Processors

Default version status: affected

  • EmbMilanPI-SP3 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 8004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Dunaffected

AMD AMD EPYC™ Embedded 9005 Series Processors

Default version status: affected

  • EmbeddedTurinPI_SP5_1004unaffected

References