CVE-2025-54518
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in Zen 2-based processors arises from improper isolation of shared resources within the CPU operation cache. This allows an attacker to corrupt instructions executed at a different privilege level, potentially leading to privilege escalation.
Risk Assessment
The organization faces a risk of privilege escalation by a local attacker, who could gain unauthorized access to critical data or systems, threatening the confidentiality and integrity of the IT infrastructure.
Recommendation
It is recommended to immediately apply microcode patches provided by the processor manufacturer (AMD) and update BIOS/UEFI to the latest version. Also monitor AMD security advisories for further information.
Other vulnerabilities in AMD Zen 2
See allOriginal NVD description (English source)
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.