PT-2026-41234 · Amd · Amd Epyc™Series 4004 Processors+20

Published 2026-05-15 · Updated 2026-05-15 · CVE-2026-0438

NVD

CVSS v4.0

5.4

Medium

Base vector

AV:P/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Fix

Weakness Enumeration

CWE-1072

Related Identifiers

CVE-2026-0438

Affected Products

Amd Epyc™Series 4004 Processors

Amd Epyc™ 4005 Series Processors

Amd Ryzen™ 7000 Series Desktop Processors

Amd Ryzen 7040 Series Processors With Radeon Graphics

Amd Ryzen™ 7045 Series Mobile Processors With Radeon™ Graphics

Amd Ryzen™ 8000 Series Desktop Processors

Amd Ryzen™ 8040 Series Mobile Processors With Radeon™ Graphics

Amd Ryzen™ 9000 Series Desktop Processors

Amd Ryzen™ 9000Hx Series Processors

Amd Ryzen™ Ai Max 300 Series Processors

Amd Ryzen™ Embedded 7000 Series Processors

Amd Ryzen™ Embedded 8000 Series Processors

Amd Ryzen™ Embedded 9000 Series Processors

Amd Ryzen™ Threadripper™ 7000 Processors

Amd Ryzen™ Threadripper™ 9000 Processors

Amd Ryzen™ Threadripper™ Pro 7000 Wx-Series Processors

Amd Ryzen™ Threadripper™ Pro 9000 Wx-Series Processors

Amd Ryzen™ Z1 Series Processors

Amd Ryzen™ Z2 Series Processors

Amd Ryzen™ Z2 Series Processors Extreme

Not Public

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-0438 · Security Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html · Note
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html · Note