Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-54509 EUVD-2025-210086GHSA-gchr-732q-fg34

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to caus…

Published Jun 9, 2026 · Updated Jul 23, 2026 · Assigned by AMD

Description

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 9004 Series Processors — GenoaPI_1.0.0.H
AMD AMD EPYC™ 9005 Series Processors — TurinPI_1.0.0.8
AMD AMD EPYC™ 8004 Series Processors — GenoaPI_1.0.0.H
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa") — EmbGenoaPI-SP5 1.0.0.D
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo") — EmbGenoaPI-SP5 1.0.0.D
AMD AMD EPYC™ Embedded 8004 Series Processors — EmbGenoaPI-SP5 1.0.0.D
AMD AMD EPYC™ Embedded 9005 Series Processors — EmbeddedTurinPI_SP5_1004

Advisories 1

References