CVE-2025-48509

No fix known EPSS <1%CVSS 1.8

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9005 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD EPYC™ Embedded 9005 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD EPYC™ Embedded 8004 Series Processors

Distro releases