CVE-2026-0438: AMD Epyc 4004 Series Processors

Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Affected products

• AMD AMD Epyc 4004 Series Processors
• AMD AMD Epyc 4005 Series Processors
• AMD AMD Ryzen 7000 Series Desktop Processors
• AMD AMD Ryzen 7000 Series Desktop Processors Formerly Codenamed Raphael
• AMD AMD Ryzen 7040 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 7045 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 8000 Series Desktop Processors
• AMD AMD Ryzen 8000 Series Desktop Processors Formerly Codenamed Phoenix
• AMD AMD Ryzen 8040 Series Mobile Processors With Radeon Graphics
• AMD AMD Ryzen 9000 Series Desktop Processors
• AMD AMD Ryzen 9000 Series Desktop Processors Formerly Codenamed Granite Ridge
• AMD AMD Ryzen 9000hx Series Processors
• AMD AMD Ryzen Ai 300 Series Processors
• AMD AMD Ryzen Ai Max 300 Series Processors
• AMD AMD Ryzen Embedded 7000 Series Processors
• AMD AMD Ryzen Embedded 8000 Series Processors
• AMD AMD Ryzen Embedded 9000 Series Processors
• AMD AMD Ryzen Threadripper 7000 Processors
• AMD AMD Ryzen Threadripper 9000 Processors
• AMD AMD Ryzen Threadripper Pro 7000 Wx-Series Processors
• AMD AMD Ryzen Threadripper Pro 9000 Wx-Series Processors
• AMD AMD Ryzen z1 Series Processors
• AMD AMD Ryzen z2 Series Processors
• AMD AMD Ryzen z2 Series Processors Extreme

Published 2026-05-15. Last modified 2026-06-17.