Read the docs
TI-2025-13067 Aliases CVE-2025-14304GHSA-phpw-4hqh-3488

ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure

Priority LOW 33CWE-693Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-693.

Summary

Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00353 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ASRockIntel 500 chipset motherboardall versions—No fix listedCNA
ASRockRackIntel 500 chipset motherboardall versions—No fix listedCNA
ASRockIndIntel 500 chipset motherboardall versions—No fix listedCNA
ASRockIntel 600 chipset motherboardall versions—No fix listedCNA
ASRockRackIntel 600 chipset motherboardall versions—No fix listedCNA
ASRockIndIntel 600 chipset motherboardall versions—No fix listedCNA
ASRockIntel 700 chipset motherboardall versions—No fix listedCNA
ASRockRackIntel 700 chipset motherboardall versions—No fix listedCNA
ASRockIndIntel 700 chipset motherboardall versions—No fix listedCNA
ASRockIntel 800 chipset motherboardall versions—No fix listedCNA
ASRockRackIntel 800 chipset motherboardall versions—No fix listedCNA
ASRockIndIntel 800 chipset motherboardall versions—No fix listedCNA
  • Intel 500 chipset motherboard VendorASRock Affected all versions Fixed in — No fix listed CNA
  • Intel 500 chipset motherboard VendorASRockRack Affected all versions Fixed in — No fix listed CNA
  • Intel 500 chipset motherboard VendorASRockInd Affected all versions Fixed in — No fix listed CNA
  • Intel 600 chipset motherboard VendorASRock Affected all versions Fixed in — No fix listed CNA
  • Intel 600 chipset motherboard VendorASRockRack Affected all versions Fixed in — No fix listed CNA
  • Intel 600 chipset motherboard VendorASRockInd Affected all versions Fixed in — No fix listed CNA
  • Intel 700 chipset motherboard VendorASRock Affected all versions Fixed in — No fix listed CNA
  • Intel 700 chipset motherboard VendorASRockRack Affected all versions Fixed in — No fix listed CNA
  • Intel 700 chipset motherboard VendorASRockInd Affected all versions Fixed in — No fix listed CNA
  • Intel 800 chipset motherboard VendorASRock Affected all versions Fixed in — No fix listed CNA
  • Intel 800 chipset motherboard VendorASRockRack Affected all versions Fixed in — No fix listed CNA
  • Intel 800 chipset motherboard VendorASRockInd Affected all versions Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-14304
  2. 2026-10-03 Alias added: GHSA-phpw-4hqh-3488

References

Advisory 4

  • TI-2020-12115 AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space… CVSS 3.1MEDIUM 6.1
  • TI-2020-10996 ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM. CVSS 3.1CRITICAL 9.8
  • TI-2018-07578 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2018-07577 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2018-07575 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.8
  • TI-2018-07576 The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1… CVSS 3.0HIGH 7.1
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences