CVE-2025-14304
Medium
Description
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
SeverityMedium
CVSS6.8
Exploit probability—
ProductIntel 500 chipset motherboard
PublishedDec 17, 2025
First seenDec 17, 2025
Weakness typeCWE-693CWE-693
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ASRock Intel 500 chipset motherboard | 0 | — |
| ASRockRack Intel 500 chipset motherboard | 0 | — |
| ASRockInd Intel 500 chipset motherboard | 0 | — |
| ASRock Intel 600 chipset motherboard | 0 | — |
| ASRockRack Intel 600 chipset motherboard | 0 | — |
| ASRockInd Intel 600 chipset motherboard | 0 | — |
| ASRock Intel 700 chipset motherboard | 0 | — |
| ASRockRack Intel 700 chipset motherboard | 0 | — |
| ASRockInd Intel 700 chipset motherboard | 0 | — |
| ASRock Intel 800 chipset motherboard | 0 | — |
| ASRockRack Intel 800 chipset motherboard | 0 | — |
| ASRockInd Intel 800 chipset motherboard | 0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.