DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
AMD EPYC, Athlon und Ryzen Prozessoren: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-02-10
Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor ausnutzen, um beliebigen Code auszuführen, sich erhöhte Berechtigungen zu verschaffen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
01
beschreibt (31)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20540US | — | — | ||
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing arbitrary messa… | ||||
| CVE-2021-46747US | — | — | ||
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Netw… | ||||
| CVE-2025-0045US | — | — | ||
Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial… | ||||
| CVE-2024-21961US | — | — | ||
Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow an attacker with access to a guest virtual machine to potentially perform a denial… | ||||
| CVE-2025-52533US | — | — | ||
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity. | ||||
| CVE-2025-54514US | — | — | ||
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity. | ||||
| CVE-2025-52536US | — | — | ||
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity. | ||||
| CVE-2025-52534US | — | — | ||
Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity. | ||||
| CVE-2025-48517US | — | — | ||
Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SE… | ||||
| CVE-2025-48515US | — | — | ||
Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting i… | ||||
| CVE-2025-48514US | — | — | ||
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confiden… | ||||
| CVE-2025-48509US | — | — | ||
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a l… | ||||
| CVE-2025-29952US | — | — | ||
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in… | ||||
| CVE-2025-29951US | — | — | ||
A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code executi… | ||||
| CVE-2025-29950US | — | — | ||
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution. | ||||
| CVE-2025-29949US | — | — | ||
Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRA… | ||||
| CVE-2025-29948US | — | — | ||
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-S… | ||||
| CVE-2025-29946US | — | — | ||
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in gue… | ||||
| CVE-2025-29939US | — | — | ||
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initiali… | ||||
| CVE-2025-0031US | — | — | ||
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent pot… | ||||
20 von 31 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- HP Security Bulletin HPSBHF04090 vom 2025-12-05external
- HP Security Bulletin HPSBHF04127 vom 2026-06-12external
- HP Security Bulletin HPESBHF04999 vom 2026-02-10external
- Lenovo Security Advisory LEN-210698 vom 2026-02-10external
- WID-SEC-W-2026-0381 - CSAF Versionself
- WID-SEC-2026-0381 - Portal Versionself
- AMD Athlon and AMD Ryzen Processor Vulnerabilities – February 2026 vom 2026-02-10external
- Dell Security Advisory DSA-2026-016 vom 2026-02-10external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan