New Patches Fix Broad AMD Security Vulnerabilities

This report details two AMD hardware vulnerabilities: a cache/coherency weakness (CVE-2025-54509, CVSS 4.0) affecting 4th/5th gen EPYC that can break guest memory consistency when a malicious host manipulates cache behavior, and a high-severity translation/TLB invalidation flaw (CVE-2025-10263, CVSS 9.1) that can allow untrusted code to affect the host. AMD has published advisories (SB-3039, SB-8021) and firmware/BIOS and Linux mitigations; the report urges administrators to check versions, test patches, and deploy updates promptly to protect cloud tenants.