CVE-2025-29934

Summary: CVE-2025-29934 is associated with AMD CPUs and SEV-SNP, where an attacker with local admin privileges could abuse stale TLB entries to run a SEV-SNP guest, potentially causing data integrity loss. The vulnerability is described across multiple sources (NVD, EUVD, CNVD, OSV, Debian, Ubunt...

AMD μProf 安全漏洞

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from improper input validation, which could lead to an MSR register overwrite, which could result in a crash or denial of service...

AMD CPU 安全漏洞

AMD CPUs are a family of CPUs from AMD. An unspecified vulnerability exists in AMD CPUs, which can be exploited by an attacker to run SEV-SNP clients with stale TLB entries, resulting in a loss of data integrity...

AMD CPU 安全漏洞

AMD CPUs are a family of CPUs from AMD. AMD CPUs suffer from an entropy mishandling vulnerability, no details of the vulnerability are provided at this time...

PT-2025-47792

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

PT-2025-47796

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

The vulnerability of the optc32_disable_crtc() function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32_optc.c driver module allows a hacker to trigger a service failure in AMD graphics cards that support Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the optc32disablecrtc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32optc.c driver module related to AMD graphics cards for Linux operating systems is associated with a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability in the capabilities_show() function of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c driver module of the AMD graphics hardware support framework for Linux operating systems allows a attacker to cause a service failure.

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allo...

HPESBHF04963 rev.2 - Certain HPE SimpliVity servers Using Certain AMD EPYC Processors. AMD-SB-3029: Stale Translation Lookaside Buffer (TLB) Entry Vulnerability, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 325 Gen10 Plus - Prior to HPE SimpliVity Gen10 Support Pack SVTSP 20250630 HPE SimpliVity 325 Gen11 - Prior to HPE SimpliVity Gen11 Support Pack SVTSP 20260116 CVSS...

CVE-2025-40148

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dcstream cursor attribute functions The function dcstreamsetcursorattributes currently dereferences the stream pointer and nested members stream-ctx-dc-currentstate without checking for...

kernel: information leak via transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

HPESBHF04962 rev.1 - Certain HPE ProLiant DL/XL servers Using Certain AMD EPYC Processors. AMD-SB-3029: Stale Translation Lookaside Buffer (TLB) Entry Vulnerability, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL325 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant Compute DL345 Gen12 - Prior to 1.1005-27-2025 HPE ProLiant DL145 Gen11 - Prior to 1.7008-07-2025 HPE ProLia...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

kernel: information leak via transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

The vulnerability of the dcn20_set_output_transfer_func() function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn20setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20HWSeq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...

The vulnerability of AMD’s microprogramming software, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of AMD’s microprogrammed software lies in the insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the function dcn32_acquire_idle_pipe_pipe_for_head_pipe_in_layer(), located in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c file of the Direct Rendering Infrastructure (DRI) support driver for AMD graphics cards in Linux operating systems, allows a malicious actor to cause a service failure.

The vulnerability of the dcn32acquireidlepipepipeforheadpipeinlayer function in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32resource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, is related to pointer aliasing. Exploiting this...

The vulnerability of the dcn401_set_output_transfer_func() function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module allows a hacker to cause a service failure. This vulnerability is related to the Direct Rendering Infrastructure (DRI) support for AMD graphics cards in Linux operating systems.

The vulnerability of the dcn401setoutputtransferfunc function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver module of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to the use of pointers. Exploiting this...