This vulnerability in AMD EPYC™ Series 9004 processors arises from improper enforcement of the LFENCE instruction's serialization property. LFENCE is intended to act as a speculation barrier to prevent speculative execution from bypassing security boundaries. Failure to enforce this properly may allow an attacker with local access and partial privileges to bypass these barriers, potentially leading to disclosure of sensitive information. The CVSS 4.0 base score is 5.7, reflecting medium severity with a local attack vector, high attack complexity, and partial privileges required. No official remediation or patch has been disclosed by AMD as of the publication date.

An attacker with local access and partial privileges could bypass speculation barriers due to improper LFENCE enforcement, potentially leading to unauthorized disclosure of sensitive information and loss of confidentiality. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should follow AMD's security recommendations and limit local access to trusted users. No vendor-provided mitigation or temporary fix is currently documented.