CVE-2025-14302: GIGABYTE｜Motherboard - Protection Mechanism Failure
Certain motherboard models developed by GIGABYTE has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14302?
CVE-2025-14302 has a high severity rating due to its potential to allow unauthenticated physical access to arbitrary physical memory.
How do I mitigate CVE-2025-14302?
To mitigate CVE-2025-14302, ensure that the IOMMU feature is properly enabled in the BIOS settings of affected GIGABYTE motherboards.
Which GIGABYTE motherboard models are affected by CVE-2025-14302?
Affected GIGABYTE motherboard models include those that do not have the IOMMU protection mechanism properly configured.
What type of attack does CVE-2025-14302 enable?
CVE-2025-14302 enables unauthenticated physical attackers to perform DMA attacks using PCIe devices.
Is there a patch available for CVE-2025-14302?
As of now, check the official GIGABYTE support site for updates and patches related to CVE-2025-14302.