CVE Catalog
CVE-2025-0033
MediumSummary
An improper access control vulnerability in AMD SEV-SNP allows an admin privileged attacker to write to the RMP during SNP initialization, potentially leading to loss of SEV-SNP guest memory integrity.
Risk Assessment
The risk involves potential compromise of memory protection for virtual machines using SEV-SNP, enabling an attacker to modify guest data and possibly escalate privileges in cloud environments.
Recommendation
Immediately apply patches provided by AMD for platforms using SEV-SNP and restrict administrative access to systems employing this technology.
Original NVD description (English source)
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity.