AMD AMD EPYCâ„¢ 9005 Series Processors

CVE-2025-54514
MEDIUM 4.8

En bref

Source
NVD
EPSS
EPSS 0.12 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
AMD
Statut NVD
Deferred

Description

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.

Faiblesses (CWE)

  • CWE-1189 — Improper Isolation of Shared Resources on System-on-a-Chip (SoC)

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 4.0MEDIUM 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:NAMD
CVSS 4.0MEDIUM 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · psirt@amd.com (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
AMD · AMD EPYC™ 9005 Series Processorsunaffected TurinPI 1.0.0.6
AMD · AMD Ryzen™ 9000HX Series Processorsunaffected FireRangeFL1 PI-1.0.0.0d
AMD · AMD Ryzen™ AI 300 Series Processorsunaffected StrixKrackanPI-FP8_1.1.0.0d ; unaffected GorgonPI-FP8_1.0.0.0
AMD · AMD Ryzen™ 9000 Series Desktop Processorsunaffected ComboAM5 PI 1.2.0.3h
AMD · AMD Ryzen™ AI Max 300 Series Processorsunaffected StrixHaloPI-FP11_1.0.0.1c
AMD · AMD Ryzen™ Z2 Series Processors Extremeunaffected StrixKrackanPI-FP8_1.1.0.0d
AMD · AMD Ryzen™ AI 400 Series Processorsunaffected GorgonPI-FP8_1.0.0.0
AMD · AMD Ryzen™ Threadripper™ 9000 Processorsunaffected ShimadaPeakPI-SP6_1.0.0.1b
AMD · AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processorsunaffected ShimadaPeakPI-SP6_1.0.0.1b
AMD · AMD EPYC™ Embedded 9005 Series Processorsunaffected EmbTurinPI-SP5_1.0.0.1

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD