Skip to main content

Amd Epyc 7003 Series Processors CVE-2025-61971

| EUVDEUVD-2025-209811 MEDIUM
Security-Sensitive Hardware Controls with Missing Lock Bit Protection (CWE-1233)
2026-05-13 AMD
Information Disclosure Red Hat Suse Amd Epyc 7003 Series Processors Amd Epyc 9004 Series Processors Amd Epyc Embedded 7003 Series Processors Amd Epyc 9005 Series Processors Amd Epyc 8004 Series Processors Amd Epyc Embedded 8004 Series Processors Amd Epyc Embedded 9005 Series Processors Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo
5.9
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
5.9 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SUSE
6.0 MEDIUM
AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Red Hat
6.0 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

1
CVE Published
May 13, 2026 - 03:02 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

Analysis

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

More in Amd Epyc 7003 Series Processors

View all
CVE-2025-54502 HIGH
7.1 Apr 16

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker

Same weakness CWE-1233 – Security-Sensitive Hardware Controls with Missing Lock Bit Protection

View all
CVE-2025-61972 HIGH
8.5
CVE-2025-25735 MEDIUM POC
4.6
CVE-2025-25733 LOW POC
3.5

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected

Share

CVE-2025-61971 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy