VULNERABILITY INTELLIGENCE

CVE-2025-61972

EPSS probability0.13%
CISA KEVNot currently listed
Published2026-05-13
Last modified2026-06-17

Description

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.

Weakness classification

  • psirt@amd.com: CWE-1233

Primary references