Description
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Affected products
amd: ryzen 7 5700g firmware; amd: ryzen 7 5700g; amd: ryzen 7 5700ge firmware; amd: ryzen 7 5700ge; amd: ryzen 5 5600g firmware; amd: ryzen 5 5600g; amd: ryzen 5 5600gt firmware; amd: ryzen 5 5600gt; amd: ryzen 5 5600ge firmware; amd: ryzen 5 5600ge; amd: ryzen 5 5500gt firmware; amd: ryzen 5 5500gt; amd: ryzen 3 5300g firmware; amd: ryzen 3 5300g; amd: ryzen 3 5300ge firmware
References2
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 Vendor Advisory
- www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7009 Vendor Advisory
Metrics
- CVSS 3.1
-
6.0
MEDIUM
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - EPSS — exploit probability
- 0% percentile: 6 · as of 5 November 2026
- CWE
- CWE-284
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.