CVE-2025-29946
MediumSummary
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Risk Assessment
The organization is at risk of sensitive data leakage from virtual machine memory and potential unauthorized modification of that data, compromising the security of virtualized environments.
Recommendation
It is recommended to immediately apply patches provided by the platform vendor (AMD) for SEV firmware and monitor security advisories for updates.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29952Medium
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
- CVE-2025-29948Medium
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
- CVE-2025-0031Medium
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
- CVE-2025-52536Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
- CVE-2025-48517Medium
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Original NVD description (English source)
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS