CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Score

CVSS 4.0 7.2 High

Status

Deferred - psirt@amd.com

Published

2025-11-21

Last modified

2026-10-18

Weaknesses

CWE-333

Affected products

• Amd Epyc 9005 Series Processors (Amd)
• Amd Ryzen 9000hx Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7055.html