CVE-2025-14304 — ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly e…
Published: 2025-12-17 · CVSS: 7.0 · CVSS 4.0
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7