AMD Prozessor und AMD Radeon: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 9

• High 8.4
  CVE-2025-0008

  Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentia…

  AMD AMD Ryzen™ 3000 Series Desktop Processors AMD EPYC™ Embedded 7003 Series Processors AMD EPYC™ 7003 Series Processors
  Nov 10, 2026
• High 7.0
  CVE-2026-14968

  AMD MmSaveStateLib SysCall path performs out-of-bounds writes for partial save-state reads

  EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could compromise SMM handler integrity, cause system instability, and lead to …

  TianoCore EDK2 edk2 edk2-hwe Debian Ubuntu
  Nov 10, 2026
• Medium 6.9
  CVE-2024-36344

  Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access …

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD EPYC™ 9005 Series Processors AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  Nov 12, 2026
• Medium 6.9
  CVE-2026-48479

  Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds, poten…

  AMD AMD Ryzen™ Embedded V2000 Series Processors AMD Ryzen™ Embedded R2000 Series Processors AMD Ryzen™ Embedded R1000 Series Processors
  Nov 11, 2026
• Medium 6.8
  CVE-2026-0470

  Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of avail…

  AMD AMD Ryzen™ Embedded V2000 Series Processors AMD Ryzen™ Embedded R2000 Series Processors AMD Ryzen™ Embedded R1000 Series Processors
  Nov 11, 2026
• Medium 6.0
  CVE-2024-21963

  An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors Debian Ubuntu Alpine
  Nov 12, 2026
• Medium 5.7
  CVE-2026-0004

  A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on th…

  AMD AMD EPYC™ 9005 Series Processors AMD EPYC™ Embedded 9005 Series Processors AMD Ryzen™ 9000 Series Desktop Processors Debian Ubuntu
  Nov 12, 2026
• Medium 5.6
  CVE-2026-18448

  Leak SMM RAM from the kernel (Simply TSA after an SMI)

  EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also…

  TianoCore EDK2 edk2 qemu Debian Ubuntu Azure Linux
  Nov 10, 2026
• Medium 4.6
  CVE-2024-36309

  Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disa…

  AMD AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics AMD EPYC™ 9005 Series Processors AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
  Nov 10, 2026

Revision history

1. 2026-11-12 #3

   Referenz(en) aufgenommen: EUVD-2024-55845, EUVD-2024-55847, EUVD-2026-124645

2. 2026-11-11 #2

   Neue Updates von Fedora und European Union Vulnerability Database aufgenommen

3. 2026-11-10 #1

   Initiale Fassung

References

• AMD Security Bulletin amd-sb-3055 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3055.html
• AMD Security Bulletin amd-sb-3059 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3059.html
• AMD Security Bulletin amd-sb-3060 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3060.html
• AMD Security Bulletin amd-sb-3061 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3061.html
• AMD Security Bulletin amd-sb-3066 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3066.html
• AMD Security Bulletin amd-sb-4018 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4018.html
• AMD Security Bulletin amd-sb-4026 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4026.html
• AMD Security Bulletin amd-sb-5010 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5010.html
• AMD Security Bulletin amd-sb-7067 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7067.html
• AMD Security Bulletin amd-sb-7072 vom 2026-11-10
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7072.html
• XEN Security Advisory XSA-524 vom 2026-11-10
  https://xenbits.xen.org/xsa/advisory-524.html
• Lenovo Security Advisory LEN-226773 vom 2026-11-11
  https://support.lenovo.com/us/en/product_security/LEN-226773
• Oracle Linux Security Advisory ELSA-2026-500590 vom 2026-11-10
  https://linux.oracle.com/errata/ELSA-2026-500590.html
• Google Cloud Platform Security Bulletin GCP-2026-081 vom 2026-11-10
  https://docs.cloud.google.com/support/bulletins#gcp-2026-081
• Lenovo Security Advisory LEN-226399 vom 2026-11-11
  https://support.lenovo.com/us/en/product_security/LEN-226399
• Oracle Linux Security Advisory ELSA-2026-500588 vom 2026-11-10
  https://linux.oracle.com/errata/ELSA-2026-500588.html
• Lenovo Security Advisory LEN-231052 vom 2026-11-11
  https://support.lenovo.com/us/en/product_security/LEN-231052
• Lenovo Security Advisory LEN-223491 vom 2026-11-11
  https://support.lenovo.com/us/en/product_security/LEN-223491
• Dell Security Advisory DSA-2026-497 vom 2026-11-10
  https://www.dell.com/support/kbdoc/de-de/000530558/dsa-2026-497-security-update-for-dell-client-platform-for-an-amd-raid-configuration-driver-vulnerability
• XEN Security Advisory XSA-525 vom 2026-11-10
  https://xenbits.xen.org/xsa/advisory-525.html
• Fedora Security Advisory FEDORA-2026-44CF81A5F1 vom 2026-11-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-44cf81a5f1
• Lenovo Security Advisory LEN-223489 vom 2026-11-11
  https://support.lenovo.com/us/en/product_security/LEN-223489
• Dell Security Advisory DSA-2026-333 vom 2026-11-11
  https://www.dell.com/support/kbdoc/de-de/000532159/dsa-2026-333-security-update-for-dell-client-platform-for-multiple-am-pc1-1-d-ryzen-and-ryzen-embedded-integrated-graphics-driver-vulnerabilities
• Oracle Linux Security Advisory ELSA-2026-500587 vom 2026-11-10
  https://linux.oracle.com/errata/ELSA-2026-500587.html
• Dell Security Advisory DSA-2026-332 vom 2026-11-11
  https://www.dell.com/support/kbdoc/de-de/000532157/dsa-2026-332-security-update-for-dell-client-platform-for-multiple-amd-graphics-vulnerabilities
• Fedora Security Advisory FEDORA-2026-D9ACB64367 vom 2026-11-11
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-d9acb64367