CVE-2025-61971 | THREATINT

Description

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

PUBLISHED Reserved 2025-10-04 | Published 2026-05-13 | Updated 2026-05-13 | Assigner AMD

MEDIUM: 5.9CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N

Problem types

CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection

Product status

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

MilanPI-SP3_1.0.0.J

unaffected

Default status

affected

TurinPI_1.0.0.8

unaffected

Default status

affected

GenoaPI_1.0.0.H

unaffected

Default status

affected

EmbMilanPI-SP3 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbGenoaPI-SP5 1.0.0.D

unaffected

Default status

affected

EmbeddedTurinPI_SP5_1004

unaffected

References

www.amd.com/...es/product-security/bulletin/AMD-SB-3030.html

cve.org (CVE-2025-61971)

nvd.nist.gov (CVE-2025-61971)

Download JSON