CVE-2025-11901

CVE-2025-11901 is a vulnerability affecting certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. It involves uncontrolled resource consumption that can lead to unauthorized direct memory access (DMA). Exploitation of this vulnerability requires a physical attacker to install a specially crafted device and supporting software utility into one of the internal expansion slots. This can allow the malicious device to read or modify system memory before the operating system's security measures are loaded, potentially enabling pre-boot code injection and access to sensitive data. Firmware updates are available to correct the IOMMU initialization and restore DMA protections.