CVE-2025-29948

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.

Risk Assessment

A malicious hypervisor could manipulate protected guest memory, threatening the confidentiality and integrity of data processed in SEV-SNP-protected virtual machines.

Recommendation

Apply AMD-provided firmware updates for SEV immediately and update virtualization platforms using this technology.

Original NVD description (English source)

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.