996 matches found
CVE-2025-54505
A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality...
AMD CPU 安全漏洞
AMD CPUs are a series of CPUs produced by Advanced Microelectronics Devices, Inc. AMD. There are security vulnerabilities in AMD CPUs, which stem from transient execution issues in the floating-point divider units. These vulnerabilities may allow local user privilege attackers to disclose data,...
USN-8203-1: Linux kernel (Oracle) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
USN-8179-3: Linux kernel vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
USN-8183-2 linux-aws, linux-aws-6.17, linux-hwe-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
The vulnerability of the memory management block for IOMMU operations in AMD’s microprogramming software for processors allows a hacker to gain unauthorized access to protected information.
The vulnerability of the memory management block for IOMMU operations in AMD microprogramming systems relates to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-010723)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010723 advisory. When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode switch potentially...
USN-8183-1 linux-gcp, linux-gcp-6.17 vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
Floating Point Divider State Sampling on AMD CPUs
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2025-54505| A transient execution vulnerability within AMD CPUs may allow a local, user-privileged attacker to leak data via the floating-point divisor unit, potentially resulting in a loss of...
poc
poc Collection of my PoC's for various vulnerabilities. L...
CVE-2025-54510
A missing lock verification in AMD Secure Processor ASP firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity...
AMD EPYC Processor 安全漏洞
The AMD EPYC Processor is a series of multi-core processors developed by American semiconductor company AMD. There is a security vulnerability in the AMD EPYC Processor, which stems from improper use of the boot service. This vulnerability may lead to privilege escalation and arbitrary code...
PoC
Fabricked: Breaking AMD SEV-SNP via Infinity Fabric !CVE-20...
Mishandling Resource Contention in AMD Processors
Revisions Revision Date| Description ---|--- 2026-04-14| Initial publication...
The vulnerability of the amdgpu_cs_submit() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the amdgpucssubmit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the optc314_set_odm_bypass() function in the drivers/gpu/drm/amd/display/dc/dcn314/dcn314_optc.c driver of the Direct Rendering Infrastructure (DRI) video card for AMD’s Linux operating system allows a hacker to cause a service failure.
The vulnerability of the optc314setodmbypass function in the drivers/gpu/drm/amd/display/dc/dcn314/dcn314optc.c driver of the Direct Rendering Infrastructure DRI video card for the Linux operating system is related to a non-uniform implementation. Exploiting this vulnerability could allow an...
The vulnerability of the amd_rp_pme_resume() function in the arch/x86/pci/fixup.c module, which is part of the Linux operating system’s platform support for x86 kernels, allows a hacker to trigger a service failure.
The vulnerability of the amdrppmeresume function in the arch/x86/pci/fixup.c module of the Linux operating system’s platform involves an infinite wait loop for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the smu_v12_0_fini_smc_tables() function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c driver module allows a attacker to cause a service failure in AMD Linux-based graphics cards with Direct Rendering Infrastructure support.
The vulnerability of the smuv120finismctables function in the drivers/gpu/drm/amd/pm/swsmu/smu12/smuv120.c driver module is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dc_state_free() function in the drivers/gpu/drm/amd/display/dc/core/dc_state.c driver code allows a malicious actor to cause a service failure in AMD Linux-based graphics cards with Direct Rendering Infrastructure (DRI) support.
The vulnerability of the dcstatefree function in the drivers/gpu/drm/amd/display/dc/core/dcstate.c driver, which is part of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems, involves pointer manipulation. Exploiting this vulnerability could allow a...