Vulnerability-Lookup

BDU:2025-10277 (CVE-2025-54502)

Vulnerability from fstec – Published: 2025-08-26 – Updated: 2026-06-24 – View on bdu.fstec.ru Exploit publicly available Fixed

Title

Уязвимость драйвера SMM AMD Platform Configuration Blob (APCB) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю выполнить производный код

Summary

Уязвимость драйвера SMM AMD Platform Configuration Blob (APCB) микропрограммного обеспечения процессоров AMD связана с ошибками при управлении привилегиями. Эксплуатация уязвимости может позволить нарушителю выполнить производный код

Severity

6.0 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:S/C:C/I:C/A:C

7.5 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.1 (High) CVSS 4.0


                      
                        CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Functionality abuse

Incidents

Being clarified

Remediation

Software update

CWE

CWE-250 - Исполнение с необязательными привилегиями

Aliases

CVE-2025-54502, PT-2026-33168

References

2 references

URL
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7054.html
https://swarm.ptsecurity.com/slowburn-looking-through-amd-platform-configuratio…

Impacted products

53 products from 1 vendor

Vendors

Advanced Micro Devices Inc.

Products

AMD Ryzen Embedded V2000 Series Processors, AMD EPYC 8004 Series, AMD EPYC 9004 Series, AMD Ryzen 4000 Series Desktop Processors, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD EPYC 4004 Series, AMD EPYC 7002 Series, AMD EPYC 7003 Series, AMD EPYC 9005 Series, AMD EPYC 9V64H, AMD Instinct MI300A, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 3000 Series Desktop Processors, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 8000 Series Desktop Processors, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 9000 Series Desktop Processors, AMD Ryzen 9000HX Series Processors, AMD Ryzen AI 300 Series Processor, AMD Ryzen AI Max 300 Series Processors, AMD Ryzen Threadripper 7000 Processors, AMD Ryzen Threadripper 9000 Processors, AMD Ryzen Threadripper PRO 3000 WX-Series Processors, AMD Ryzen Threadripper PRO 5000 WX-Series Processors, AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD Ryzen Threadripper PRO 9000 WX-Series Processors, AMD Ryzen Z1 Series Processors, AMD Ryzen Z2 Series Processors Extreme, AMD Ryzen AI Z2 Extreme, AMD Ryzen Z2 Series Processors, AMD Ryzen Z2 Series Processors Go, AMD EPYC Embedded 7002, AMD EPYC Embedded 7003, AMD EPYC Embedded 8004, AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Bergamo"), AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Genoa"), AMD Ryzen Embedded 7000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 8000, AMD Ryzen Embedded 9000 Series Processors, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V3000

Versions

до EmbeddedPI-FP6_1.0.0.D (AMD Ryzen Embedded V2000 Series Processors), до GenoaPI 1.0.0.H (AMD EPYC 8004 Series), до GenoaPI 1.0.0.H (AMD EPYC 9004 Series), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 4000 Series Desktop Processors), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), до ComboAM5PI 1.0.0.d (AMD EPYC 4004 Series), до RomePI 1.0.0.P (AMD EPYC 7002 Series), до MilanPI 1.0.0.J (AMD EPYC 7003 Series), до TurinPI 1.0.0.9 (AMD EPYC 9005 Series), до MI300C 1.0.0.3 (AMD EPYC 9V64H), до MI300A 1.0.0.C (AMD Instinct MI300A), до PicassoPI-FP5_1.0.1.2e (AMD Athlon 3000 Series Mobile processors with Radeon graphics), до ComboAM4v2PI 1.2.0.10 (AMD Ryzen 3000 Series Desktop Processors), до ComboAM4PI 1.0.0.10 (AMD Ryzen 3000 Series Desktop Processors), до PicassoPI-FP5_1.0.1.2e (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), до RenoirPI-FP6 1.0.0.Ed (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), до CezannePI-FP6_1.0.1.1d (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), до RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen 6000 Series Processors with Radeon Graphics), до ComboAM5PI 1.0.0.d (AMD Ryzen 7000 Series Desktop Processors), до ComboAM5PI 1.1.0.3f (AMD Ryzen 7000 Series Desktop Processors), до ComboAM5PI 1.2.0.3h (AMD Ryzen 7000 Series Desktop Processors), до ComboAM5PI 1.2.8.0 (AMD Ryzen 7000 Series Desktop Processors), до MendocinoPI-FT6_1.0.0.7g (AMD Ryzen 7020 Series Processors with Radeon Graphics), до CezannePI-FP6_1.0.1.1d (AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics), до RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen 7035 Series Processors with Radeon Graphics), до PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), до DragonRangeFL1PI 1.0.0.3k (AMD Ryzen 7045 Series Processors with Radeon Graphics), до ComboAM5PI 1.1.0.3f (AMD Ryzen 8000 Series Desktop Processors), до ComboAM5PI 1.2.0.3h (AMD Ryzen 8000 Series Desktop Processors), до ComboAM5PI 1.2.8.0 (AMD Ryzen 8000 Series Desktop Processors), до PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics), до ComboAM5PI 1.2.0.3h (AMD Ryzen 9000 Series Desktop Processors), до ComboAM5PI 1.2.8.0 (AMD Ryzen 9000 Series Desktop Processors), до FireRangeFL1PI 1.0.0.0d (AMD Ryzen 9000HX Series Processors), до StrixKrackanPI-FP8_1.1.0.0e (AMD Ryzen AI 300 Series Processor), до StrixHaloPI-FP11_1.0.0.2a (AMD Ryzen AI Max 300 Series Processors), до ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper 7000 Processors), до ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper 9000 Processors), до ChagallWSPI-sWRX8 1.0.0.D (AMD Ryzen Threadripper PRO 3000 WX-Series Processors), до CastlePeakWSPI-sWRX8 1.0.0.I (AMD Ryzen Threadripper PRO 3000 WX-Series Processors), до ChagallWSPI-sWRX8 1.0.0.D (AMD Ryzen Threadripper PRO 5000 WX-Series Processors), до ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до StormPeakPI-SP6 1.0.0.1m (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до StormPeakPI-SP6_1.1.0.0k (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), до ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper PRO 9000 WX-Series Processors), до PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen Z1 Series Processors), до StrixKrackanPI-FP8_1102d (AMD Ryzen Z2 Series Processors Extreme), до StrixKrackanPI-FP8_1102d (AMD Ryzen AI Z2 Extreme), до PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen Z2 Series Processors), до RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen Z2 Series Processors Go), до EmbRomePI-SP3 1.0.0.F (AMD EPYC Embedded 7002), до EmbMilanPI-SP3 1.0.0.D (AMD EPYC Embedded 7003), до EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 8004), до EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Bergamo")), до EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 9004 Series Processors (formerly codenamed "Genoa")), до Version TBD (AMD EPYC 9005 Series), до EmbeddedAM5PI 1.0.0.7 (AMD Ryzen Embedded 7000), до EmbAM4PI 1.0.0.9 (AMD Ryzen Embedded 5000), до EmbeddedPhoenixPI-FP7r2_1.0.0.4 (AMD Ryzen Embedded 8000), до EmbeddedAM5PI 1.0.0.5 (AMD Ryzen Embedded 9000 Series Processors), до EmbeddedPI-FP5 1213 (AMD Ryzen Embedded R1000), до EmbeddedR2KPI-FP5 1008 (AMD Ryzen Embedded R2000), до EmbeddedPI-FP5 1213 (AMD Ryzen Embedded V1000), до Embedded-PI_FP7r2 1012 (AMD Ryzen Embedded V3000)

Product types

Firmware, Микропрограммный код аппаратных компонентов компьютера, Appliance software

Mitigations

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков. Компенсирующие меры: - ограничение возможности получения физического доступа к устройствам с уязвимым компонентом; - ограничение возможности загрузки пользовательских UEFI‑образов; - использование средств антивирусной защиты с возможностью мониторинга целостности ядра; - отключение функций Legacy USB, Thunderbolt, PCI-e Hot-Plug; - использование средств защиты информации от DMA-атак; - настройка функции BIOS Lock для ограничения доступа к настройкам устройства с уязвимым компонентом. Использование рекомендаций: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7054.html

Credits

Выявлена исследователем: Тимофей Дудицкий (Positive Technologies)

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": "AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Advanced Micro Devices Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e EmbeddedPI-FP6_1.0.0.D (AMD Ryzen Embedded V2000 Series Processors), \u0434\u043e GenoaPI 1.0.0.H (AMD EPYC 8004 Series), \u0434\u043e GenoaPI 1.0.0.H (AMD EPYC 9004 Series), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 4000 Series Desktop Processors), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 5000 Series Desktop processor with Radeon graphics), \u0434\u043e ComboAM5PI 1.0.0.d (AMD EPYC 4004 Series), \u0434\u043e RomePI 1.0.0.P (AMD EPYC 7002 Series), \u0434\u043e MilanPI 1.0.0.J (AMD EPYC 7003 Series), \u0434\u043e TurinPI 1.0.0.9 (AMD EPYC 9005 Series), \u0434\u043e MI300C 1.0.0.3 (AMD EPYC 9V64H), \u0434\u043e MI300A 1.0.0.C (AMD Instinct MI300A), \u0434\u043e PicassoPI-FP5_1.0.1.2e (AMD Athlon 3000 Series Mobile processors with Radeon graphics), \u0434\u043e ComboAM4v2PI 1.2.0.10 (AMD Ryzen 3000 Series Desktop Processors), \u0434\u043e ComboAM4PI 1.0.0.10 (AMD Ryzen 3000 Series Desktop Processors), \u0434\u043e PicassoPI-FP5_1.0.1.2e (AMD Ryzen 3000 Series Mobile processor with Radeon graphics), \u0434\u043e RenoirPI-FP6 1.0.0.Ed (AMD Ryzen 4000 Series Mobile processors with Radeon graphics), \u0434\u043e CezannePI-FP6_1.0.1.1d (AMD Ryzen 5000 Series Mobile processor with Radeon graphics), \u0434\u043e RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen 6000 Series Processors with Radeon Graphics), \u0434\u043e ComboAM5PI 1.0.0.d (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.1.0.3f (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.2.0.3h (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.2.8.0 (AMD Ryzen 7000 Series Desktop Processors), \u0434\u043e MendocinoPI-FT6_1.0.0.7g (AMD Ryzen 7020 Series Processors with Radeon Graphics), \u0434\u043e CezannePI-FP6_1.0.1.1d (AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics), \u0434\u043e RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen 7035 Series Processors with Radeon Graphics), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics), \u0434\u043e DragonRangeFL1PI 1.0.0.3k (AMD Ryzen 7045 Series Processors with Radeon Graphics), \u0434\u043e ComboAM5PI 1.1.0.3f (AMD Ryzen 8000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.2.0.3h (AMD Ryzen 8000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.2.8.0 (AMD Ryzen 8000 Series Desktop Processors), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics), \u0434\u043e ComboAM5PI 1.2.0.3h (AMD Ryzen 9000 Series Desktop Processors), \u0434\u043e ComboAM5PI 1.2.8.0 (AMD Ryzen 9000 Series Desktop Processors), \u0434\u043e FireRangeFL1PI 1.0.0.0d (AMD Ryzen 9000HX Series Processors), \u0434\u043e StrixKrackanPI-FP8_1.1.0.0e (AMD Ryzen AI 300 Series Processor), \u0434\u043e StrixHaloPI-FP11_1.0.0.2a (AMD Ryzen AI Max 300 Series Processors), \u0434\u043e ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper 7000 Processors), \u0434\u043e ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper 9000 Processors), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.D (AMD Ryzen Threadripper PRO 3000 WX-Series Processors), \u0434\u043e CastlePeakWSPI-sWRX8 1.0.0.I (AMD Ryzen Threadripper PRO 3000 WX-Series Processors), \u0434\u043e ChagallWSPI-sWRX8 1.0.0.D (AMD Ryzen Threadripper PRO 5000 WX-Series Processors), \u0434\u043e ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e StormPeakPI-SP6 1.0.0.1m (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e StormPeakPI-SP6_1.1.0.0k (AMD Ryzen Threadripper PRO 7000 WX-Series Processors), \u0434\u043e ShimadaPeakPI-SP6 1.0.0.1c (AMD Ryzen Threadripper PRO 9000 WX-Series Processors), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen Z1 Series Processors), \u0434\u043e StrixKrackanPI-FP8_1102d (AMD Ryzen Z2 Series Processors Extreme), \u0434\u043e StrixKrackanPI-FP8_1102d (AMD Ryzen AI Z2 Extreme), \u0434\u043e PhoenixPI-FP8-FP7_1.2.0.0f (AMD Ryzen Z2 Series Processors), \u0434\u043e RembrandtPI-FP7_1.0.0.Bg (AMD Ryzen Z2 Series Processors Go), \u0434\u043e EmbRomePI-SP3 1.0.0.F (AMD EPYC Embedded 7002), \u0434\u043e EmbMilanPI-SP3 1.0.0.D (AMD EPYC Embedded 7003), \u0434\u043e EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 8004), \u0434\u043e EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")), \u0434\u043e EmbGenoaPI-SP5 1.0.0.D (AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Genoa\")), \u0434\u043e Version TBD (AMD EPYC 9005 Series), \u0434\u043e EmbeddedAM5PI 1.0.0.7 (AMD Ryzen Embedded 7000), \u0434\u043e EmbAM4PI 1.0.0.9 (AMD Ryzen Embedded 5000), \u0434\u043e EmbeddedPhoenixPI-FP7r2_1.0.0.4 (AMD Ryzen Embedded 8000), \u0434\u043e EmbeddedAM5PI 1.0.0.5 (AMD Ryzen Embedded 9000 Series Processors), \u0434\u043e EmbeddedPI-FP5 1213 (AMD Ryzen Embedded R1000), \u0434\u043e EmbeddedR2KPI-FP5 1008 (AMD Ryzen Embedded R2000), \u0434\u043e EmbeddedPI-FP5 1213 (AMD Ryzen Embedded V1000), \u0434\u043e Embedded-PI_FP7r2 1012 (AMD Ryzen Embedded V3000)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 UEFI\u2011\u043e\u0431\u0440\u0430\u0437\u043e\u0432;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u044f\u0434\u0440\u0430;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Legacy USB, Thunderbolt, PCI-e Hot-Plug;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0442 DMA-\u0430\u0442\u0430\u043a;\n- \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 BIOS Lock \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7054.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "26.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.06.2026",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "26.08.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10277",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-54502, PT-2026-33168",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "AMD Ryzen Embedded V2000 Series Processors, AMD EPYC 8004 Series, AMD EPYC 9004 Series, AMD Ryzen 4000 Series Desktop Processors, AMD Ryzen 5000 Series Desktop processor with Radeon graphics, AMD EPYC 4004 Series, AMD EPYC 7002 Series, AMD EPYC 7003 Series, AMD EPYC 9005 Series, AMD EPYC 9V64H, AMD Instinct MI300A, AMD Athlon 3000 Series Mobile processors with Radeon graphics, AMD Ryzen 3000 Series Desktop Processors, AMD Ryzen 3000 Series Mobile processor with Radeon graphics, AMD Ryzen 4000 Series Mobile processors with Radeon graphics, AMD Ryzen 5000 Series Mobile processor with Radeon graphics, AMD Ryzen 6000 Series Processors with Radeon Graphics, AMD Ryzen 7000 Series Desktop Processors, AMD Ryzen 7020 Series Processors with Radeon Graphics, AMD Ryzen 7030 Series Mobile Processors with Radeon Graphics, AMD Ryzen 7035 Series Processors with Radeon Graphics, AMD Ryzen 7040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 7045 Series Processors with Radeon Graphics, AMD Ryzen 8000 Series Desktop Processors, AMD Ryzen 8040 Series Mobile Processors with Radeon Graphics, AMD Ryzen 9000 Series Desktop Processors, AMD Ryzen 9000HX Series Processors, AMD Ryzen AI 300 Series Processor, AMD Ryzen AI Max 300 Series Processors, AMD Ryzen Threadripper 7000 Processors, AMD Ryzen Threadripper 9000 Processors, AMD Ryzen Threadripper PRO 3000 WX-Series Processors, AMD Ryzen Threadripper PRO 5000 WX-Series Processors, AMD Ryzen Threadripper PRO 7000 WX-Series Processors, AMD Ryzen Threadripper PRO 9000 WX-Series Processors, AMD Ryzen Z1 Series Processors, AMD Ryzen Z2 Series Processors Extreme, AMD Ryzen AI Z2 Extreme, AMD Ryzen Z2 Series Processors, AMD Ryzen Z2 Series Processors Go, AMD EPYC Embedded 7002, AMD EPYC Embedded 7003, AMD EPYC Embedded 8004, AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Bergamo\"), AMD EPYC Embedded 9004 Series Processors (formerly codenamed \"Genoa\"), AMD Ryzen Embedded 7000, AMD Ryzen Embedded 5000, AMD Ryzen Embedded 8000, AMD Ryzen Embedded 9000 Series Processors, AMD Ryzen Embedded R1000, AMD Ryzen Embedded R2000, AMD Ryzen Embedded V1000, AMD Ryzen Embedded V3000",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 SMM AMD Platform Configuration Blob (APCB) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (CWE-250)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 SMM AMD Platform Configuration Blob (APCB) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 AMD \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c: \u0422\u0438\u043c\u043e\u0444\u0435\u0439 \u0414\u0443\u0434\u0438\u0446\u043a\u0438\u0439 (Positive Technologies)",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7054.html\nhttps://swarm.ptsecurity.com/slowburn-looking-through-amd-platform-configuration-blobs-infrastructure/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-250",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,1)"
}

CVE-2025-54502 (GCVE-0-2025-54502)

Vulnerability from cvelistv5 – Published: 2026-04-16 18:46 – Updated: 2026-07-15 01:26

Summary

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-16 00:00 UTC

CWE

CWE-668 - Exposure of Resource to Wrong Sphere
CWE-648 - Incorrect Use of Privileged APIs

Assigner

AMD mitre root

References

4 references

URL	Tags
https://www.amd.com/en/resources/product-security…
https://access.redhat.com/security/cve/CVE-2025-54502	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2459023	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex

Impacted products

69 products

Vendor	Product	Version
AMD	AMD EPYC™ 9004 Series Processors	Unaffected: GenoaPI_1.0.0.H
AMD	AMD EPYC™ 7003 Series Processors	Unaffected: MilanPI-SP3_1.0.0.J
AMD	AMD EPYC™ 7002 Series Processors	Unaffected: Rome-1.0.0.P
AMD	AMD EPYC™ 4004 Series Processors	Unaffected: ComboAM5PI 1.0.0.d
AMD	AMD EPYC™ 9005 Series Processors	Unaffected: TurinPI-SP5_1.0.0.9
AMD	AMD Instinct™ MI300A Series Processors	Unaffected: MI300A 1.0.0.C
AMD	AMD EPYC™ 9V64H Processor	Unaffected: MI300C 1.0.0.3
AMD	AMD EPYC™ 8004 Series Processors	Unaffected: GenoaPI_1.0.0.H
AMD	AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics	Unaffected: RenoirPI-FP6 1.0.0.Ed
AMD	AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics	Unaffected: RembrandtPI-FP7_1.0.0.Bg
AMD	AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5_1.0.1.2e
AMD	AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0f
AMD	AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics	Unaffected: MendocinoPI-FT6_1.0.0.7g
AMD	AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics	Unaffected: DragonRangeFL1PI 1.0.0.3k
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.0.0.d
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.D
AMD	AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6_1.0.1.1d
AMD	AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors	Unaffected: CastlePeakWSPI-sWRX8 1.0.0.I
AMD	AMD Ryzen™ 9000HX Series Processors	Unaffected: FireRangeFL1PI 1.0.0.0d
AMD	AMD Ryzen™ AI 300 Series Processors	Unaffected: StrixKrackanPI-FP8_1.1.0.0e
AMD	AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors	Unaffected: ChagallWSPI-sWRX8 1.0.0.D
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Unaffected: StormPeakPI-SP6 1.0.0.1m Unaffected: StormPeakPI-SP6_1.1.0.0k
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.1.0.3f
AMD	AMD Ryzen™ 7000 Series Desktop Processors	Unaffected: ComboAM5PI 1.2.0.3h
AMD	AMD Ryzen™ 8000 Series Desktop Processors	Unaffected: ComboAM5PI 1.1.0.3f
AMD	AMD Ryzen™ 8000 Series Desktop Processors	Unaffected: ComboAM5PI 1.2.0.3h
AMD	AMD Ryzen™ 9000 Series Desktop Processors	Unaffected: ComboAM5PI 1.2.0.3h
AMD	AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics	Unaffected: CezannePI-FP6_1.0.1.1d
AMD	AMD Ryzen™ 4000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 5000 Series Desktop Processors	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics	Unaffected: ComboAM4v2PI 1.2.0.10
AMD	AMD Ryzen™ 3000 Series Desktop Processors	Unaffected: ComboAM4PI 1.0.0.10
AMD	AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0f
AMD	AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics	Unaffected: PicassoPI-FP5_1.0.1.2e
AMD	AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics	Unaffected: RembrandtPI-FP7_1.0.0.Bg
AMD	AMD Ryzen™ AI Max 300 Series Processors	Unaffected: StrixHaloPI-FP11_1.0.0.2a
AMD	AMD Ryzen™ Z1 Series Processors	Unaffected: StrixKrackanPI-FP8_1.1.0.0e Unaffected: PhoenixPI-FP8-FP7_1.2.0.0f
AMD	AMD Ryzen™ Z2 Series Processors Extreme	Unaffected: StrixKrackanPI-FP8_1.1.0.0e
AMD	AMD Ryzen™ Z2 Series Processors	Unaffected: PhoenixPI-FP8-FP7_1.2.0.0f
AMD	AMD Ryzen™ Z2 Series Processors Go	Unaffected: RembrandtPI-FP7_1.0.0.Bg
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Unaffected: ShimadaPeakPI-SP6 1.0.0.1c
AMD	AMD Ryzen™ Threadripper™ 7000 Processors	Unaffected: ShimadaPeakPI-SP6 1.0.0.1c
AMD	AMD Ryzen™ Threadripper™ 9000 Processors	Unaffected: ShimadaPeakPI-SP6 1.0.0.1c
AMD	AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors	Unaffected: ShimadaPeakPI-SP6 1.0.0.1c
AMD	AMD Ryzen™ AI 300 Series Processors	Unaffected: StrixKrackanPI-FP8_1.1.0.2d
AMD	AMD Ryzen™ 7000 Series Desktop Processors (formerly codenamed "Raphael")	Unaffected: ComboAM5PI 1.2.8.0
AMD	AMD Ryzen™ 8000 Series Desktop Processors (formerly codenamed "Phoenix")	Unaffected: ComboAM5PI 1.2.8.0
AMD	AMD Ryzen™ 9000 Series Desktop Processors (formerly codenamed "Granite Ridge")	Unaffected: ComboAM5PI 1.2.8.0
AMD	AMD EPYC™ Embedded 7003 Series Processors	Unaffected: EmbMilanPI-SP3 1.0.0.D
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")	Unaffected: EmbGenoaPI-SP5 1.0.0.D
AMD	AMD EPYC™ Embedded 7002 Series Processors	Unaffected: EmbRomePI-SP3 1.0.0.F
AMD	AMD Ryzen™ Embedded R1000 Series Processors	Unaffected: EmbeddedPI-FP5 1213
AMD	AMD Ryzen™ Embedded R2000 Series Processors	Unaffected: EmbeddedR2KPI-FP5 1008
AMD	AMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")	Unaffected: EmbeddedPI-FP5 1213
AMD	AMD Ryzen™ Embedded 5000 Series Processors	Unaffected: EmbAM4PI 1.0.0.9
AMD	AMD Ryzen™ Embedded V2000 Series Processors	Unaffected: EmbeddedPI-FP6_1.0.0.D
AMD	AMD Ryzen™ Embedded V3000 Series Processors	Unaffected: Embedded-PI_FP7r2 1012
AMD	AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")	Unaffected: EmbGenoaPI-SP5 1.0.0.D
AMD	AMD EPYC™ Embedded 8004 Series Processors	Unaffected: EmbGenoaPI-SP5 1.0.0.D
AMD	AMD Ryzen™ Embedded 9000 Series Processors	Unaffected: EmbeddedAM5PI 1.0.0.5
AMD	AMD Ryzen™ Embedded 8000 Series Processors	Unaffected: EmbeddedPhoenixPI-FP7r2_1.0.0.4
AMD	AMD Ryzen™ Embedded 7000 Series Processors	Unaffected: EmbeddedAM5PI 1.0.0.7
AMD	AMD EPYC™ Embedded 9005 Series Processors	Unaffected: EmbeddedTurinPI_SP5_1004
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9

Date Public

2026-04-16 18:45

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54502",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-16T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-17T03:55:16.268Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "unaffected",
            "packageName": "libkrun",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "kernel-rt",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-04-16T18:46:13.377Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the AMD Platform Configuration Blob (APCB) SMM driver. A privileged attacker with local access (Ring 0) can exploit an incorrect use of a boot service. This vulnerability may allow the attacker to achieve privilege escalation, potentially leading to arbitrary code execution."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-648",
                "description": "Incorrect Use of Privileged APIs",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T01:26:07.627Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2025-54502"
          },
          {
            "name": "RHBZ#2459023",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459023"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-54502.json"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-04-16T20:00:50.766Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-04-16T18:46:13.377Z",
            "value": "Made public."
          }
        ],
        "title": "AMD Platform Configuration Blob: APCB SMM driver: kernel: linux-firmware: AMD APCB SMM driver: Arbitrary Code Execution via incorrect boot service use",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "GenoaPI_1.0.0.H"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7003 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MilanPI-SP3_1.0.0.J"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7002 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Rome-1.0.0.P"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 4004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9005 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "TurinPI-SP5_1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Instinct\u2122 MI300A Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MI300A 1.0.0.C"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 9V64H Processor",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MI300C 1.0.0.3"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 8004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "GenoaPI_1.0.0.H"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RenoirPI-FP6 1.0.0.Ed"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7035 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bg"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Athlon\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5_1.0.1.2e"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7020 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "MendocinoPI-FT6_1.0.0.7g"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7045 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "DragonRangeFL1PI 1.0.0.3k"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.0.0.d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7030 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6_1.0.1.1d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 3000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CastlePeakWSPI-sWRX8 1.0.0.I"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000HX Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "FireRangeFL1PI 1.0.0.0d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI 300 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.0e"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 5000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ChagallWSPI-sWRX8 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6 1.0.0.1m"
            },
            {
              "status": "unaffected",
              "version": "StormPeakPI-SP6_1.1.0.0k"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3h"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.1.0.3f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3h"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.0.3h"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6_1.0.1.1d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "CezannePI-FP6_1.0.1.1d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 4000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 5000 Series Desktop Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4v2PI 1.2.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Desktop Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM4PI 1.0.0.10"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8040 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 3000 Series Mobile Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PicassoPI-FP5_1.0.1.2e"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 6000 Series Processors with Radeon\u2122 Graphics",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bg"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI Max 300 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixHaloPI-FP11_1.0.0.2a"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z1 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.0e"
            },
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z2 Series Processors Extreme",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.0e"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z2 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "PhoenixPI-FP8-FP7_1.2.0.0f"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Z2 Series Processors Go",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "RembrandtPI-FP7_1.0.0.Bg"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ShimadaPeakPI-SP6 1.0.0.1c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 7000  Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ShimadaPeakPI-SP6 1.0.0.1c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 9000 Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ShimadaPeakPI-SP6 1.0.0.1c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 9000 WX-Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ShimadaPeakPI-SP6 1.0.0.1c"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 AI 300 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "StrixKrackanPI-FP8_1.1.0.2d"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 7000 Series Desktop Processors (formerly codenamed \"Raphael\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.8.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 8000 Series Desktop Processors (formerly codenamed \"Phoenix\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.8.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 9000 Series Desktop Processors (formerly codenamed \"Granite Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "ComboAM5PI 1.2.8.0"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7003 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbMilanPI-SP3 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 7002 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbRomePI-SP3 1.0.0.F"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R1000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1213"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded R2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedR2KPI-FP5 1008"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V1000 Series Processors (formerly codenamed \"Raven Ridge\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP5 1213"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 5000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbAM4PI 1.0.0.9"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V2000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPI-FP6_1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded V3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "Embedded-PI_FP7r2 1012"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 8004 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbGenoaPI-SP5 1.0.0.D"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 9000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI 1.0.0.5"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 8000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedPhoenixPI-FP7r2_1.0.0.4"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD Ryzen\u2122 Embedded 7000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedAM5PI 1.0.0.7"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 9005 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "EmbeddedTurinPI_SP5_1004"
            }
          ]
        }
      ],
      "datePublic": "2026-04-16T18:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eIncorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.\u003c/div\u003e"
            }
          ],
          "value": "Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-668",
              "description": "CWE-668  Exposure of Resource to Wrong Sphere",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T19:12:58.645Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7054.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2025-54502",
    "datePublished": "2026-04-16T18:46:13.377Z",
    "dateReserved": "2025-07-23T15:01:50.731Z",
    "dateUpdated": "2026-07-15T01:26:07.627Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2025-10277 (CVE-2025-54502)

CVE-2025-54502 (GCVE-0-2025-54502)

Tags

Sightings

Nomenclature

Related by attack behaviour