Technical impact
The vulnerability stems from insufficient granularity of access control within the AMD Secure Processor (ASP). An untrusted user‑space application can map sensitive System Management Network apertures, creating a path for elevating privileges. This weakness aligns with CWE‑1220 and grants an attacker the ability to access critical system resources that should be protected by hardware isolation.
Affected Systems
Affected hardware includes a wide range of AMD processors and GPUs such as the Athlon 3000 Series Desktop and Mobile CPUs, Ryzen 3000/4000/5000/7030 Series Desktop and Mobile CPUs, Ryzen Embedded 5000/ R1000/ R2000/ V1000/ V2000/ V3000 series, Ryzen Threadripper Pro 3000 WX and 5000 WX, and Radeon PRO and RX 5000/6000/7000 Series graphics products. Each of these devices hosts the AMD Secure Processor that can be exploited when the access controls are not granular enough.
Risk and Exploitability
The CVSS score of 7.1 indicates a high severity for privilege escalation. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a local attack, where an adversary runs a malicious user‑space program capable of mapping protected SMN apertures. This local privilege escalation could compromise system integrity and confidentiality if the attacker gains sufficient control over the secure processor.
