CVE-2025-61971 Security feature bypass in AMD EPYC™ 7003 Series Processors
Local admin attackers can bypass SEV-SNP integrity protections by modifying MMIO routing via unprotected NBIO registers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-61971?
CVE-2025-61971 is a medium-severity vulnerability in AMD EPYC™ 7003 Series Processors, published on 13 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.
Weakness: CWE-1233
Which versions are affected by CVE-2025-61971?
How do I fix CVE-2025-61971?
No fix has been published for CVE-2025-61971 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-61971 being exploited?
There is no known exploitation of CVE-2025-61971 in the wild and no public exploit code.