{"id":170698,"date":"2026-05-15T06:24:34","date_gmt":"2026-05-15T04:24:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin"},"modified":"2026-05-15T06:24:34","modified_gmt":"2026-05-15T04:24:34","slug":"uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","title":{"rendered":"O vulnerabilitate \u00een CPU AMD Zen 2, care permite cre\u0219terea privilegiilor \u0219i ocolirea izol\u0103rii ma\u0219inilor virtuale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania AMD a dezv\u0103luit informa\u021bii despre o vulnerabilitate (CVE-2025-54518) \u00een procesoarele bazate pe microarhitectura Zen 2, care cauzeaz\u0103 deteriorarea cache-ului codurilor obiect. Exploatarea cu succes a vulnerabilit\u0103\u021bii permite executarea instruc\u021biunilor CPU la un nivel mai \u00eenalt de privilegii. \u00cen practic\u0103, problema permite poten\u021bial cre\u0219terea privilegiilor \u00een sistem, de exemplu, din spa\u021biul utilizatorului, ob\u021binerea execu\u021biei codului cu drepturi de kernel sau accesul la mediu gazd\u0103 dintr-o ma\u0219in\u0103 virtual\u0103. <\/p>\n

Vulnerabilitatea a fost identificat\u0103 de angaja\u021bii AMD, dar detaliile exploat\u0103rii nu sunt deocamdat\u0103 disponibile. S-a declarat c\u0103 problema este cauzat\u0103 de o izolare incorect\u0103 a resurselor partajate \u00een timpul opera\u021biunilor cu cache-ul codurilor obiect ale CPU. Prin deteriorarea elementelor din cache, un atacator poate modifica instruc\u021biunile executate pe un alt nivel de privilegii. <\/p>\n

Vulnerabilitatea se manifest\u0103 doar \u00een procesoarele AMD bazate pe microarhitectura Zen2 (Fam17h). Problema afecteaz\u0103 hypervisorul Xen \u0219i poate fi utilizat\u0103 pentru a ocoli izolarea. Pentru ramurile Xen 4.17 p\u00e2n\u0103 la 4.21 au fost publicate patch-uri. O corec\u021bie pentru blocarea vulnerabilit\u0103\u021bii a fost, de asemenea, trimis\u0103 pentru a fi inclus\u0103 \u00een nucleul Linux. <\/p>\n

\u00cen seriile de desktop \u0219i mobile CPU AMD Ryzen 3000, 4000, 5000, 7020, 7030 \u0219i Threadripper PRO 3000 WX, vulnerabilitatea a fost remediat\u0103 \u00een toamna anului trecut. \u00cen CPU-urile \u00eencorporate AMD Ryzen Embedded V2000, vulnerabilitatea a fost remediat\u0103 la sf\u00e2r\u0219itul lunii decembrie. \u00cen procesoarele din seria AMD EPYC 7002, problema r\u0103m\u00e2ne nereparat\u0103 \u0219i se recomand\u0103 blocarea acesteia la nivelul sistemului de operare.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-54518) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 2, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u044d\u0448\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u043a\u043e\u0434\u043e\u0432. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 CPU \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0438\u0437 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170698","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een CPU AMD Zen 2, care permite cre\u0219terea privilegiilor \u0219i ocolirea izol\u0103rii ma\u0219inilor virtuale | ProHoster","description":"Compania AMD a dezv\u0103luit informa\u021bii despre o vulnerabilitate (CVE-2025-54518) \u00een procesoarele bazate pe microarhitectura Zen 2, care cauzeaz\u0103 deteriorarea cache-ului codurilor obiect.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 CPU AMD Zen 2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-54518) \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 2, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u044d\u0448\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u043d\u044b\u0445 \u043a\u043e\u0434\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-cpu-amd-zen-2-pozvolyayushhaya-povysit-privilegii-i-obojti-izolyacziyu-virtualnyh-mashin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-15T04:24:34+00:00","article:modified_time":"2026-05-15T04:24:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/170698","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=170698"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/170698\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=170698"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=170698"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=170698"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}