Uncontrolled Resource Consumption Vulnerability in ASUS Motherboards Using Intel Chipsets

CVE-2025-11901

What is CVE-2025-11901?

An uncontrolled resource consumption vulnerability exists in certain ASUS motherboards that utilize Intel's B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, and W680 chipsets. This vulnerability requires physical access to the internal expansion slots, where an attacker can install a specially crafted device along with a supporting software utility. If exploited, this can lead to uncontrolled resource consumption, raising the risk of unauthorized direct memory access (DMA) to the system. It is crucial for users to review ASUS's security advisory for firmware updates that address this issue.

References