CVE-2025-29946
MediumSummary
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Risk Assessment
The organization is at risk of sensitive data leakage from virtual machine memory and potential unauthorized modification of that data, compromising the security of virtualized environments.
Recommendation
It is recommended to immediately apply patches provided by the platform vendor (AMD) for SEV firmware and monitor security advisories for updates.
Original NVD description (English source)
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.