EUVD-2024-55844

Missing Lock Bit Protection in the Northbridge IO NBIO could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impacting data confidentiality, integrity, or availability...

CVE-2024-36309

A missing Lock Bit Protection in the Northbridge IO (NBIO) allows a privileged attacker to perform a remapping attack. This attack involves using an intentionally disabled device, potentially impacting the confidentiality, integrity, or availability of the system data. The vulnerability is associ...

Improper Locking of NBIO Devices Could Allow Privileged Remapping Attacks

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2024-36309| Missing Lock Bit Protection in the Northbridge IO NBIO could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially...

PT-2026-106599

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description In the drm/amdgpu component, the function nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without verifying if they are NULL. Because amdgpu ras get context and...

PT-2026-115815

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio v7 9 handle ras controller intr no bifring dereferences ras and obj without checking either for NULL. Both amdgpu ras get context and amdgpu ras find obj can return NULL, e.g...

CVE-2026-45976 drm/amdgpu: Fix memory leak in amdgpu_ras_init()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpurasinit When amdgpunbiorasswinit fails in amdgpurasinit, the function returns directly without freeing the allocated con structure, leading to a memory leak. Fix this by jumping to the...

CVE-2025-61972

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network SMN access, potentially resulting in arbitrary code execution in AMD Secure Processor ASP and loss of the SEV-SNP guest's confidentiality and integrity...

CVE-2025-61972

The CVE-2025-61972 entry describes a vulnerability in AMD NBIO where missing lock bit protection on NBIO registers can be exploited by a local admin with high privileges to gain arbitrary System Management Network (SMN) access. This can potentially lead to arbitrary code execution within the AMD ...

EUVD-2025-209812

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network SMN access, potentially resulting in arbitrary code execution in AMD Secure Processor ASP and loss of the SEV-SNP guest's confidentiality and integrity...

CVE-2025-61972

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network SMN access, potentially resulting in arbitrary code execution in AMD Secure Processor ASP and loss of the SEV-SNP guest's confidentiality and integrity...

CVE-2025-61972

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network SMN access, potentially resulting in arbitrary code execution in AMD Secure Processor ASP and loss of the SEV-SNP guest's confidentiality and integrity...

CVE-2025-61971

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity...

CVE-2025-61971

The CVE-2025-61971 entry concerns missing lock bit protection for NBIO registers in AMD systems, enabling a locally privileged attacker to modify MMIO routing configurations and potentially compromise SEV-SNP guest integrity. Connected sources confirm affected component as NBIO registers and MMIO...

EUVD-2025-209811

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity...

CVE-2025-61972: Security-Sensitive Hardware Controls with Missing Lock Bit Protection

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network SMN access, potentially resulting in arbitrary code execution in AMD Secure Processor ASP and loss of the SEV-SNP guest's confidentiality and integrity...

CVE-2025-61971: Security-Sensitive Hardware Controls with Missing Lock Bit Protection

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993071 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbiov74 if rasmanager obj null, don't print NBIO er...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990879)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990879 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbiov74 if rasmanager obj null, don't print NBIO er...

kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker with low privileges could trigger a null pointer dereference by interacting with the nbiov74 functionality when the rasmanager object is null. This could lead to a system crash, resulting in a denial of service...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: the warning dereferencing obj for nbiov74 if rasmanager obj null, don’t print NBIO err data...