A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Thu, 16 Apr 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Missing lock check in AMD Platform Security Processor in AMD EPYC™ 9005 Series CPUs allows a privileged attacker to potentially impact guest confidentiality via local access. | A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity. |
Thu, 16 Apr 2026 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 16 Apr 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Missing lock check in AMD Platform Security Processor in AMD EPYC™ 9005 Series CPUs allows a privileged attacker to potentially impact guest confidentiality via local access. | |
| Weaknesses | CWE-414 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: AMD
Published:
Updated: 2026-04-16T19:10:19.002Z
Reserved: 2025-07-23T15:01:50.734Z
Link: CVE-2025-54510
Vulnrichment
Updated: 2026-04-16T18:56:33.115Z
NVD
Status : Received
Published: 2026-04-16T19:16:32.897
Modified: 2026-04-16T20:16:37.840
Link: CVE-2025-54510
Redhat
No data.
OpenCVE Enrichment
No data.