CVE-2025-61972
NoneCVSS
—
EPSS
0.1%
Published
May 13, 2026
CISA due date
—
The record
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution in AMD Secure Processor (ASP) and loss of the SEV-SNP guest's confidentiality and integrity.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|