CVE-2025-29939
MediumSummary
An improper access control vulnerability in Secure Encrypted Virtualization (SEV) allows a privileged attacker to write to the reverse map page (RMP) during Secure Nested Paging (SNP) initialization, potentially leading to loss of guest memory confidentiality and integrity.
Risk Assessment
The organization risks compromise of guest memory confidentiality and integrity, enabling an attacker to read or modify sensitive data within virtual machines.
Recommendation
Apply vendor-provided patches immediately and update the firmware supporting SEV/SNP to mitigate the vulnerability.
Original NVD description (English source)
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.