Missing lock bit protection for NBIO registers could allow a local admin-privileged…
Priority LOW 38CWE-1233Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- High
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0013 2nd percentileScored 2026-11-07
Fix Fixed AMD EPYC™ 9004 Series Processors (AMD): GenoaPI_1.0.0.HAMD EPYC™ 9005 Series Processors (AMD): TurinPI_1.0.0.8+5 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| AMD | AMD EPYC™ 9004 Series Processors | — | GenoaPI_1.0.0.H | Patch available | CNA |
| AMD | AMD EPYC™ 9005 Series Processors | — | TurinPI_1.0.0.8 | Patch available | CNA |
| AMD | AMD EPYC™ 8004 Series Processors | — | GenoaPI_1.0.0.H | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") | — | EmbGenoaPI-SP5 1.0.0.D | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") | — | EmbGenoaPI-SP5 1.0.0.D | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 8004 Series Processors | — | EmbGenoaPI-SP5 1.0.0.D | Patch available | CNA |
| AMD | AMD EPYC™ Embedded 9005 Series Processors | — | EmbeddedTurinPI_SP5_1004 | Patch available | CNA |
- AMD EPYC™ 9004 Series Processors VendorAMD Affected — Fixed in GenoaPI_1.0.0.H Patch available CNA
- AMD EPYC™ 9005 Series Processors VendorAMD Affected — Fixed in TurinPI_1.0.0.8 Patch available CNA
- AMD EPYC™ 8004 Series Processors VendorAMD Affected — Fixed in GenoaPI_1.0.0.H Patch available CNA
- AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.D Patch available CNA
- AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.D Patch available CNA
- AMD EPYC™ Embedded 8004 Series Processors VendorAMD Affected — Fixed in EmbGenoaPI-SP5 1.0.0.D Patch available CNA
- AMD EPYC™ Embedded 9005 Series Processors VendorAMD Affected — Fixed in EmbeddedTurinPI_SP5_1004 Patch available CNA
Remediation
- Fix · CNA AMD EPYC™ 9004 Series Processors (AMD) Fixed in GenoaPI_1.0.0.H
- Fix · CNA AMD EPYC™ 9005 Series Processors (AMD) Fixed in TurinPI_1.0.0.8
- Fix · CNA AMD EPYC™ 8004 Series Processors (AMD) Fixed in GenoaPI_1.0.0.H
- Fix · CNA AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.D
- Fix · CNA AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.D
- Fix · CNA AMD EPYC™ Embedded 8004 Series Processors (AMD) Fixed in EmbGenoaPI-SP5 1.0.0.D
- Fix · CNA AMD EPYC™ Embedded 9005 Series Processors (AMD) Fixed in EmbeddedTurinPI_SP5_1004
Timeline
- 2026-10-02 Threatist record created from CVE-2025-61972
More AMD vulnerabilities
- TI-2026-36341 AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization CVSS 4.0CRITICAL 9.2
- TI-2023-07046 Improper privilege management in AMD Radeon™ RX 5000 Series Graphics Cards CVSS 3.1HIGH 7.8
- TI-2023-04574 GPU kernel implementations susceptible to memory leak CVSS 3.1MEDIUM 6.5
- TI-2023-07042 Information disclosure through error messages in AMD Ryzen™ 3000 Series Desktop… CVSS 3.1MEDIUM 5.5
- TI-2023-23747 PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers… CVSS 3.1MEDIUM 5.3
- TI-2022-07839 Improper access control in System Management Mode (SMM) may allow an attacker to write to… CVSS 3.1CRITICAL 9.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences