CVE-2025-54509

Improper access control for register interface in the input-output memory management unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD secure processor (ASP) potentially resulting in loss of integrity.

Scoring

Severity

MEDIUM

CVSS base score

4

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N

EPSS probability

0.13%

CWE

CWE-1262

Published

2026-06-09

Last modified

2026-07-24

Affected products

• AMD AMD EPYC™ 9004 Series Processors
• AMD AMD EPYC™ 9005 Series Processors
• AMD AMD EPYC™ 8004 Series Processors
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")
• AMD AMD EPYC™ Embedded 8004 Series Processors
• AMD AMD EPYC™ Embedded 9005 Series Processors

Weakness type

• CWE-1262

Related vulnerabilities

• CVE-2025-47385 — Improper Access Control for Register Interface in SCE-Mink
• CVE-2025-36194 — This Power System update is being released to address
• CVE-2025-20788 — In GPU pdma, there is a possible memory corruption due to a missing permission check. This could...
• CVE-2023-20599 — Improper register access control in ASP may allow a privileged attacker to perform unauthorized...
• CVE-2024-45556 — Improper Access Control for Register Interface in TZ Firmware
• CVE-2025-1882 — i-Drive i11/i12 Device Setting improper access control for register interface
• CVE-2022-23005 — Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature

Markdown version · Browse all CVEs