CVE-2025-61972
No fix known EPSS <1%CVSS 8.5
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
Products: AMD EPYC™ 9004 Series Processors, AMD EPYC™ 9005 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9005 Series Processors