CVE-2025-61971: AMD Epyc 7003 Series Processors

Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.

Affected products

• AMD AMD Epyc 7003 Series Processors
• AMD AMD Epyc 8004 Series Processors
• AMD AMD Epyc 9004 Series Processors
• AMD AMD Epyc 9005 Series Processors
• AMD AMD Epyc Embedded 7003 Series Processors
• AMD AMD Epyc Embedded 8004 Series Processors
• AMD AMD Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo
• AMD AMD Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa
• AMD AMD Epyc Embedded 9005 Series Processors

Published 2026-05-13. Last modified 2026-06-17.