Esxi 8 X And Esxi 9 X Hosts Using Amd Pensando Dpu Products
Monthly
Kernel and cross-guest memory disclosure in VMware ESXi 8.x/9.x hosts running the AMD-Pensando 'ionic' cloud DPU driver allows an attacker operating from an unprivileged guest VM to read hypervisor kernel memory or the memory of co-located guest VMs, breaking tenant isolation. The flaw (CWE-822, untrusted pointer dereference) was reported by AMD and can result in loss of confidentiality or availability. There is no public exploit identified at time of analysis, and EPSS is negligible at 0.01%, with CISA SSVC recording no observed exploitation.
Privilege escalation in the ionic network driver on VMware ESXi 8.x and 9.x hosts equipped with AMD-Pensando DPU hardware allows a low-privileged local attacker to corrupt heap memory and potentially execute arbitrary code with elevated privileges. Reported by AMD (AMD-SB-2001) and tracked as EUVD-2025-209814, the flaw carries a CVSS 4.0 base score of 8.8 with total technical impact but high attack complexity. There is no public exploit identified at time of analysis, and CISA SSVC rates exploitation as none with EPSS at just 0.01%, indicating no observed exploitation activity.
Local privilege escalation in the ionic cloud driver used by VMware ESXi 8.x and 9.x hosts running AMD-Pensando DPU products allows a low-privileged local attacker to corrupt heap memory and potentially execute arbitrary code with elevated (host-level) privileges. The flaw was reported by AMD (AMD-SB-2001) and carries a CVSS 4.0 base score of 8.8 with a 'total' technical impact under SSVC. There is no public exploit identified at time of analysis and EPSS is negligible (0.01%, 3rd percentile), consistent with SSVC exploitation status of 'none'.
Kernel and cross-guest memory disclosure in VMware ESXi 8.x/9.x hosts running the AMD-Pensando 'ionic' cloud DPU driver allows an attacker operating from an unprivileged guest VM to read hypervisor kernel memory or the memory of co-located guest VMs, breaking tenant isolation. The flaw (CWE-822, untrusted pointer dereference) was reported by AMD and can result in loss of confidentiality or availability. There is no public exploit identified at time of analysis, and EPSS is negligible at 0.01%, with CISA SSVC recording no observed exploitation.
Privilege escalation in the ionic network driver on VMware ESXi 8.x and 9.x hosts equipped with AMD-Pensando DPU hardware allows a low-privileged local attacker to corrupt heap memory and potentially execute arbitrary code with elevated privileges. Reported by AMD (AMD-SB-2001) and tracked as EUVD-2025-209814, the flaw carries a CVSS 4.0 base score of 8.8 with total technical impact but high attack complexity. There is no public exploit identified at time of analysis, and CISA SSVC rates exploitation as none with EPSS at just 0.01%, indicating no observed exploitation activity.
Local privilege escalation in the ionic cloud driver used by VMware ESXi 8.x and 9.x hosts running AMD-Pensando DPU products allows a low-privileged local attacker to corrupt heap memory and potentially execute arbitrary code with elevated (host-level) privileges. The flaw was reported by AMD (AMD-SB-2001) and carries a CVSS 4.0 base score of 8.8 with a 'total' technical impact under SSVC. There is no public exploit identified at time of analysis and EPSS is negligible (0.01%, 3rd percentile), consistent with SSVC exploitation status of 'none'.