CVE-2025-0031
MediumSummary
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
Risk Assessment
The risk involves potential integrity violation in virtualized environments using AMD SEV, which could allow an attacker to access or manipulate sensitive data.
Recommendation
It is recommended to immediately apply patches provided by the vendor (AMD) for SEV firmware and monitor virtualized environments for unauthorized migrations.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29952Medium
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
- CVE-2025-29948Medium
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
- CVE-2025-29946Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- CVE-2025-52536Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
- CVE-2025-48517Medium
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Original NVD description (English source)
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS