CVE-2025-61972
Published: May 13, 2026
Modified: May 14, 2026
Description
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
| Vendor | Product | Versions |
|---|---|---|
AMD | AMD EPYC™ 9004 Series Processors | unaffected GenoaPI_1.0.0.H |
AMD | AMD EPYC™ 9005 Series Processors | unaffected TurinPI_1.0.0.8 |
AMD | AMD EPYC™ 8004 Series Processors | unaffected GenoaPI_1.0.0.H |
AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") | unaffected EmbGenoaPI-SP5 1.0.0.D |
AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") | unaffected EmbGenoaPI-SP5 1.0.0.D |
AMD | AMD EPYC™ Embedded 8004 Series Processors | unaffected EmbGenoaPI-SP5 1.0.0.D |
AMD | AMD EPYC™ Embedded 9005 Series Processors | unaffected EmbeddedTurinPI_SP5_1004 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now