AMD EPYC 9005 Series CPUs Platform Security Processor Vulnerability Impacting Guest Confidentiality

A vulnerability exists in the AMD Platform Security Processor of EPYC 9005 Series CPUs, where a missing lock check allows a privileged attacker to potentially compromise guest confidentiality through local access. This issue arises from improper verification in the Secure Processor firmware, which could enable unauthorized alterations to Memory Mapped I/O (MMIO) routing, thereby affecting the integrity of guest systems.

Impact

Exploitation of this vulnerability could lead to unauthorized access to confidential information of guest systems, potentially allowing for privacy breaches or unauthorized data manipulation.

Remediation

Users should contact their OEM for the specific BIOS update related to this vulnerability. AMD has scheduled a release for the EPYC 9005 Series Processors on November 26, 2025.