Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on some Zen 5-based products, potentially compromising guest system integrity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-14 | 2 | False Positive1Patch1 |
| 2026-04-16 | 1 | Exploit1 |
| 2026-04-17 | 2 | Disclosure2 |
| 2026-04-20 | 2 | Disclosure2 |
| 2026-05-19 | 1 | Discl1 |
| 2026-05-22 | 1 | False Positive1 |
CVE-2025-54510、これ「AWSやGoogle Cloudに悪意があればユーザーの秘密計算をのぞける」というものなんだけど、そもそもAWSやGoogleに悪意があればハード改造し放題なわけで、これは本当に脆弱性なのか? 秘密計算というコンセプトが、嘘、ごまかし、詐欺というだけな気がしてくるのだが、、、
Post summary
The post expresses skepticism about CVE-2025‑54510, labeling its alleged impact as misinformation and implying the vulnerability does not exist.
@angelroom0 Me when AMD/Intel ship literal spyware into a CPU but le anticheat is the problem and CVE-2025-27708, CVE-2025-54510 are totally normal behavior 👀👀👀👀👀👀👀
Post summary
The tweet claims that CVE-2025-27708 and CVE-2025-54510 are normal behavior and therefore not serious security concerns, effectively debunking them as false positives.
Amazing work with @wech_chris and @BenedictSchluet. To appear at @USENIXSecurity'26 AMD has released patches for CVE-2025-54510
Post summary
The text announces that AMD has released patches for CVE‑2025‑54510, with no additional exploitation or PoC details.
Pesquisadores da ETH Zurich descobriram a falha Fabricked (CVE-2025-54510) no AMD Infinity Fabric, que permite roubo de dados em máquinas virtuais protegidas por SEV-SNP via hipervisor malicioso. A AMD já lançou patches para Zen 3, 4 e 5. (Fonte: GitHub, ETH Zurich e AMD) https://t.co/rMdIELRRFw
Post summary
Researchers at ETH Zurich disclosed the Fabricked flaw (CVE‑2025‑54510) affecting AMD Infinity Fabric, enabling data theft from SEV‑SNP protected VMs via a malicious hypervisor. AMD has already released patches for Zen 3, Zen 4 and Zen 5.
ETH Zurich researchers unmasked "Fabricked" (CVE-2025-54510), a flaw in AMD Infinity Fabric that bypasses SEV-SNP memory isolation. Patch your firmware today! #Fabricked #AMD #ConfidentialComputing #CyberSecurity #InfoSec #CloudSecurity #HardwareSecurity https://securityonline.info/fabricked-amd-sev-snp-vulnerability-cve-2025-54510/ https://t.co/VBgYsIhjSP
Post summary
ETH Zurich researchers expose a new AMD Infinity Fabric flaw (CVE‑2025‑54510) that bypasses SEV‑SNP memory isolation and recommend patching firmware immediately.
Intel Report [CRITICAL] - A critical vulnerability designated CVE-2025-54510, dubbed "Fabricked," has been disclosed affecting AMD's Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP) technology. The attack exploits AMD's Infinity... https://www.enigma-global.com/og/report/cve-2025-54510-fabricked-deterministic-attack-against-amd-sev-snp-confidential-mo7by251-47lu
Post summary
The report announces CVE-2025-54510, a critical vulnerability in AMD SEV‑SNP called "Fabricked", detailing its exploitation vectors but does not provide PoC, patch, or active exploitation evidence.
CVE-2025-54510 A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on… https://www.cve.org/CVERecord?id=CVE-2025-54510
Post summary
The entry details a missing lock verification in AMD Secure Processor firmware that could allow privileged local attackers to alter MMIO routing, but no exploitation evidence, PoC, or patch information is provided.
CVE-2025-54510 Missing Lock Verification in AMD Secure Processor Firmwar... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-54510 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet posts a link to a vulnerability details page for CVE‑2025‑54510, but provides no evidence of an exploit, patch, or active usage.
Fabricked breaks AMD's SEV-SNP with a malicious hypervisor. CVE-2025-54510 targets Zen 5 EPYC processors confirmed vulnerable; AMD advisory extends to Zen 3 and Zen 4. Researchers Chris Wech, Benedict Schlüter, and Shweta Shinde from ETH Zurich disclosed to AMD on August 3, 2025. Embargo lifted April 14, 2026. Patch available. Requires UEFI privileges for the hypervisor. Step 1: Patch UEFI firmware to bypass Infinity Fabric lockdown API calls. Fabric remains configurable post-SEV-SNP activation. Step 2: Reconfigure Infinity Fabric routing to redirect memory transactions away from the Platform Security Processor (PSP). Step 3: During SNP_INIT, PSP attempts to write the Reverse Map Table (RMP) for Confidential VM access controls. Writes fail on poisoned routes, leaving RMP in insecure defaults. Step 4: Gain arbitrary read/write access to every Confidential VM. SEV-SNP confidentiality and integrity defeated. 100% deterministic, software-only attack. No cooperation from victim VMs required. A trusted coprocessor is only as trusted as the fabric carrying its writes.
Post summary
AMD disclosed CVE‑2025‑54510, exposing a software‑only, deterministic vulnerability in SEV‑SNP that can be exploited via a malicious hypervisor; detailed attack steps and a UEFI patch are provided.