Local Privilege Escalation Vulnerability in AMD Secure Processor
CVE-2025-61972
8.5HIGH
Key Information:
What is CVE-2025-61972?
The vulnerability arises from the lack of lock bit protection for NBIO registers within the AMD Secure Processor. This oversight can be exploited by an attacker with local admin privileges, granting them unauthorized access to the System Management Network (SMN). The exploitation may lead to arbitrary code execution within the AMD Secure Processor, ultimately compromising the confidentiality and integrity of SEV-SNP guest environments.
Affected Version(s)
AMD EPYC™ 8004 Series Processors GenoaPI_1.0.0.H
AMD EPYC™ 9004 Series Processors GenoaPI_1.0.0.H
AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.8