Medium WID-SEC-2026-1111 3 CVEs

AMD Prozessoren: Mehrere Schwachstellen

Published Apr 14, 2026 · Updated Jul 27, 2026 · Revision 6 · de-DE

Vendor: AMD Vendor: Dell Vendor: Google Vendor: HPE Vendor: Lenovo Vendor: SUSE Product: Cloud Platform Product: Computer Product: Computer Product: Linux Product: openSUSE Product: PowerEdge Product: ProLiant Product: Prozessor

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessoren ausnutzen, um sich Administratorrechte zu verschaffen, beliebigen Code auszuführen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.

Product

Prozessoren sind die zentralen Rechenwerke eines Computers.

Vulnerabilities 3

High 7.1

CVE-2025-54502

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacke…

AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD EPYC™ 9005 Series Processors AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics

Apr 16, 2026
Medium 5.9

CVE-2025-54510

A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…

AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD EPYC™ 9004 Series Processors

Apr 16, 2026
Medium 5.6

CVE-2023-20585

Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised h…

AMD AMD EPYC™ 9004 Series Processors AMD EPYC™ Embedded 7003 Series Processors AMD EPYC™ 7003 Series Processors Ubuntu

Apr 16, 2026

Revision history

2026-07-27 #6
Neue Updates von SUSE aufgenommen
2026-06-08 #5
Neue Updates von openSUSE aufgenommen
2026-04-27 #4
Neue Updates von Dell aufgenommen
2026-04-19 #3
Neue Updates von HP und Google aufgenommen
2026-04-16 #2
Referenz(en) aufgenommen: EUVD-2025-209508, EUVD-2023-24764, EUVD-2025-209510
2026-04-14 #1
Initiale Fassung

References

AMD Security Bulletin AMD-SB-3016 vom 2026-04-14
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3016.html
AMD Security Bulletin AMD-SB-3034 vom 2026-04-14
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3034.html
AMD Security Bulletin AMD-SB-7054 vom 2026-04-14
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7054.html
AMD Security Bulletin AMD-SB-7060 vom 2026-04-14
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7060.html
Lenovo Security Advisory LEN-213828 vom 2026-04-15
https://support.lenovo.com/us/en/product_security/LEN-213828
HP Security Bulletin HPESBHF05035 vom 2026-04-14
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05035en_us&docLocale=en_US
HP Security Bulletin HPESBHF05034 vom 2026-04-14
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05034en_us&docLocale=en_US
Google Cloud Platform Security Bulletin GCP-2026-019 vom 2026-04-14
https://docs.cloud.google.com/support/bulletins#gcp-2026-019
Dell Security Advisory DSA-2026-043 vom 2026-04-15
https://www.dell.com/support/kbdoc/000452212
Dell Security Advisory DSA-2026-004 vom 2026-04-15
https://www.dell.com/support/kbdoc/000452207
Dell Security Advisory DSA-2026-041 vom 2026-04-15
https://www.dell.com/support/kbdoc/000452216
HPE Security Advisory
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf05036en_us&docLocale=en_US
Google Cloud Platform Security Bulletin GCP-2026-021 vom 2026-04-17
https://docs.cloud.google.com/support/bulletins#gcp-2026-021
Dell Security Advisory DSA-2026-044 vom 2026-04-27
https://www.dell.com/support/kbdoc/de-de/000412584/dsa-2026-044
openSUSE Security Update OPENSUSE-SU-2026:20912-1 vom 2026-06-08
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FZM3URQQWLAAXA44ZXVWIGRPJ3OVLFFC/
SUSE Security Update SUSE-SU-2026:22809-1 vom 2026-07-27
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027822.html
SUSE Security Update SUSE-SU-2026:22810-1 vom 2026-07-27
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027821.html