VULNERABILITY INTELLIGENCE

CVE-2025-54518

CVSS score7.3 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-09-10
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Weakness classification

  • CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
  • CWE-1220: Insufficient Granularity of Access Control

Primary references