Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-54518

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege leve

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 7002 Series Processors

Default version status: affected

  • os kernelunaffected

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • RenoirPI-FP6_1.0.0.Edunaffected

AMD AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics

Default version status: affected

  • MendocinoPI-FT6_1.0.0.7funaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 1.2.0.10unaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Default version status: affected

  • ChagallWSPI-sWRX8-1.0.0.Dunaffected

AMD AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1dunaffected

AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors

Default version status: affected

  • CastlePeakWSPI-sWRX8 1.0.0.Iunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1dunaffected

AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics

Default version status: affected

  • CezannePI-FP6_1.0.1.1dunaffected

AMD AMD Ryzen™ 4000 Series Desktop Processors

Default version status: affected

  • ComboAM4v2 1.2.0.10unaffected

AMD AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics

Default version status: affected

  • ComboAM4v2 1.2.0.10unaffected

AMD AMD Ryzen™ 3000 Series Desktop Processors

Default version status: affected

  • ComboAM4PI 1.0.0.10unaffected

AMD AMD EPYC™ Embedded 7002 Series Processors

Default version status: affected

  • OS kernelunaffected

AMD AMD Ryzen Embedded V2000A Series Processors

Default version status: affected

  • EmbeddedV2KAPI-FP6 1.0.0.Aunaffected

AMD AMD Ryzen™ Embedded V2000 Series Processors

Default version status: affected

  • EmbeddedPI-FP6_1.0.0.Dunaffected

References