Riskcovery

CVE-2025-54518

State
Published
Severity
7.3 High
Published
May 15, 2026
Updated
Sep 10, 2026
Reserved
Jul 23, 2025

Read the record on cve.org

Description

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Scores

CVSSScoreVectorSource
4.07.3 HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NAMD
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hredhat-SADP

Weaknesses

  • CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
  • CWE-1220 Insufficient Granularity of Access Control

Affected Products

ProductVersions
AMD EPYC™ 7002 Series ProcessorsAMD
  • os kernelNot affected
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ GraphicsAMD
  • RenoirPI-FP6_1.0.0.EdNot affected
AMD Ryzen™ 7020 Series Processors with Radeon™ GraphicsAMD
  • MendocinoPI-FT6_1.0.0.7fNot affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4v2 1.2.0.10Not affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • ChagallWSPI-sWRX8-1.0.0.DNot affected
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series ProcessorsAMD
  • CastlePeakWSPI-sWRX8 1.0.0.INot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ GraphicsAMD
  • CezannePI-FP6_1.0.1.1dNot affected
AMD Ryzen™ 4000 Series Desktop ProcessorsAMD
  • ComboAM4v2 1.2.0.10Not affected
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ GraphicsAMD
  • ComboAM4v2 1.2.0.10Not affected
AMD Ryzen™ 3000 Series Desktop ProcessorsAMD
  • ComboAM4PI 1.0.0.10Not affected
AMD EPYC™ Embedded 7002 Series ProcessorsAMD
  • OS kernelNot affected
AMD Ryzen Embedded V2000A Series ProcessorsAMD
  • EmbeddedV2KAPI-FP6 1.0.0.ANot affected
AMD Ryzen™ Embedded V2000 Series ProcessorsAMD
  • EmbeddedPI-FP6_1.0.0.DNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.