Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

AMD AMD EPYCâ„¢ 9004 Series Processors

CVE-2025-29934
MEDIUM 5.3

En bref

Source
NVD
EPSS
EPSS 0.12 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
AMD
Statut NVD
Deferred

Rechercher sur…

Description

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.

Faiblesses (CWE)

  • CWE-459 — Nettoyage incomplet

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:NAMD
CVSS 3.1MEDIUM 5.3CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:NNVD · psirt@amd.com (Secondary)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
AMD · AMD EPYC™ 9004 Series Processorsunaffected Genoa 1.0.0.E
AMD · AMD EPYC™ 9005 Series Processorsunaffected Turin 1.0.0.6
AMD · AMD EPYC™ 8004 Series Processorsunaffected Genoa 1.0.0.E
AMD · AMD EPYC™ Embedded 7003 Series Processorsunaffected EmbMilanPI-SP3 v9 1.0.0.B
AMD · AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")unaffected EmbGenoaPI-SP5 1.0.0.A
AMD · AMD EPYC™ Embedded 9005 Series Processorsunaffected EmbTurinPI-SP5 1.0.0.1
AMD · AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")unaffected EmbGenoaPI-SP5 1.0.0.A
AMD · AMD EPYC™ Embedded 8004 Series Processorsunaffected EmbGenoaPI-SP5 1.0.0.A

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD