CVE-2025-0031
MediumSummary
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
Risk Assessment
The risk involves potential integrity violation in virtualized environments using AMD SEV, which could allow an attacker to access or manipulate sensitive data.
Recommendation
It is recommended to immediately apply patches provided by the vendor (AMD) for SEV firmware and monitor virtualized environments for unauthorized migrations.
Original NVD description (English source)
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.