{"id":170698,"date":"2026-05-15T06:24:34","date_gmt":"2026-05-15T04:24:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin"},"modified":"2026-05-15T06:24:34","modified_gmt":"2026-05-15T04:24:34","slug":"uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","title":{"rendered":"AMD Zen 2 CPU haavatavus, mis v\u00f5imaldab privileegide t\u00f5stmist ja virtuaalmasinate isolatsiooni \u00fcletamist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

AMD avaldas teavet mikroarhitektuur Zen 2 baasil t\u00f6\u00f6tavate protsessorite haavatavuse (CVE-2025-54518) kohta, mis p\u00f5hjustab objekti koodide m\u00e4luahela rikutust. Haavatavuse edukas \u00e4rakasutamine v\u00f5imaldab t\u00e4ita CPU k\u00e4ske k\u00f5rgema privileegi tasemel. Praktiliselt v\u00f5imaldab probleem potentsiaalselt t\u00f5sta privileege s\u00fcsteemis, n\u00e4iteks kasutaja ruumist j\u00f5uda kerneliga seotud koodi k\u00e4itamiseni v\u00f5i p\u00e4\u00e4seda juurde host-\u00f6kos\u00fcsteemile virtuaalmasinast. <\/p>\n

Haavatavus avastati AMD t\u00f6\u00f6tajate poolt, \u00e4rakasutamise detaile pole veel avaldatud. Teadaanne on, et probleem on seotud jagatud ressursside vale isoleerimisega objekti koodide m\u00e4luahela t\u00f6\u00f6tlemisel. Ahnestamisest tulenevalt v\u00f5ib r\u00fcndaja saavutada, et juhiseid muutakse, mis t\u00e4idetakse teisel privileegi tasemel. <\/p>\n

Haavatavus ilmneb ainult AMD Zen2 mikroarhitektuuriga protsessorites (Fam17h). Probleem m\u00f5jutab Xen h\u00fcperviisorit ja seda saab kasutada isolatsiooni \u00fcletamiseks. Xen versioonides 4.17\u20134.21 on avaldatud plaastrid. Probleemi blokeerimiseks m\u00f5eldud parandused on saadetud ka Linuxi kerneli kaasamiseks. <\/p>\n

AMD Ryzen 3000, 4000, 5000, 7020, 7030 ja Threadripper PRO 3000 WX lauaarvutite ja mobiilsete CPU-de seeriates on haavatavus elimineeritud eelmise aasta s\u00fcgisel. AMD Ryzen Embedded V2000 integreeritud CPU-des on probleem lahendatud detsembri l\u00f5puks. AMD EPYC 7002 seeria protsessorites j\u00e4\u00e4b probleem lahendamata ja selle blokeerimist soovitatakse teostada operatsioonis\u00fcsteemi tasemel.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-54518) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 2, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u044d\u0448\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u043a\u043e\u0434\u043e\u0432. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 CPU \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0438\u0437 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170698","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AMD Zen 2 CPU haavatavus, mis v\u00f5imaldab privileegide t\u00f5stmist ja virtuaalmasinate isolatsiooni \u00fcletamist | ProHoster","description":"AMD avaldas teavet mikroarhitektuur Zen 2 baasil t\u00f6\u00f6tavate protsessorite haavatavuse (CVE-2025-54518) kohta, mis p\u00f5hjustab objekti koodide m\u00e4luahela rikutust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD Zen 2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-54518) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 2, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u044d\u0448\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u043a\u043e\u0434\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-15T04:24:34+00:00","article:modified_time":"2026-05-15T04:24:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170698","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=170698"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/170698\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=170698"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=170698"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=170698"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}