CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause
CVSS
—
No CVSS
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: Jun 9, 2026 · Last modified: Jul 23, 2026 · CWE-1262
0.1%EPSS · 30 days0.1%
2026-09-222026-10-19
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2025-332076.8 MED3.9%
——1NVIDIA ConnectX and Bluefield contain a vulnerability in a control register, where a user with VF access could cause improper access control for the register interface by sending a malicious command to the firmware. A successful exploit of this vulnerability might lead to denial of service.7dCVE-2025-207884.4 MED0.1%
——0In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS10117735; Issue ID: MSV-4539.3d