High WID-SEC-2025-2569 3 CVEs

AMD EPYC-Prozessoren und Arm Trusted Firmware: Mehrere Schwachstellen

Published Nov 11, 2025 · Updated Nov 23, 2025 · Revision 3 · de-DE

Vendor: AMD Vendor: Dell Vendor: HPE Product: PowerEdge Product: ProLiant Product: Prozessor

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessor ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.

Product

Prozessoren sind die zentralen Rechenwerke eines Computers.

Vulnerabilities 3

High 8.6

CVE-2025-48507 Public exploit

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-se…

AMD Zynq™ UltraScale+ MPSoCs Zynq™ UltraScale+ RFSoCs Kria™ SOM

Nov 23, 2025
Medium 5.3

CVE-2025-29934

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries…

AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD EPYC™ 9004 Series Processors Debian Ubuntu

Nov 21, 2025
Low 1.0

CVE-2025-54515

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State…

AMD Versal™ AI Core Series Alveo™ V80 Compute Accelerator Versal™ Adaptive SoC Devices Browsers

Nov 23, 2025

Revision history

2025-11-23 #3
Referenz(en) aufgenommen: EUVD-2025-198507, EUVD-2025-198576, EUVD-2025-198581
2025-11-12 #2
Neue Updates von Dell aufgenommen
2025-11-11 #1
Initiale Fassung

References

AMD Security Bulletin AMD-SB-3029 vom 2025-11-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3029.html
AMD Security Bulletin AMD-SB-8017 vom 2025-11-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8017.html
AMD Security Bulletin AMD-SB-8020 vom 2025-11-11
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8020.html
HP Security Bulletin HPESBHF04962 vom 2025-11-12
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04962en_us&docLocale=en_US
Dell Security Advisory DSA-2025-350 vom 2025-11-13
https://www.dell.com/support/kbdoc/000390641