CVE Vulnerabilities

CVE-2025-48510

Unexpected Status Code or Return Value

Published: Nov 24, 2025 | Modified: Nov 26, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.

Weakness

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

Affected Software

Name Vendor Start Version End Version
Uprof Amd * 5.0.1174 (excluding)
Uprof Amd * 5.0.1223 (excluding)
Uprof Amd * 5.0.1479 (excluding)

References