CVE-2025-29948
MediumSummary
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
Risk Assessment
A malicious hypervisor could manipulate protected guest memory, threatening the confidentiality and integrity of data processed in SEV-SNP-protected virtual machines.
Recommendation
Apply AMD-provided firmware updates for SEV immediately and update virtualization platforms using this technology.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29952Medium
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
- CVE-2025-29946Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- CVE-2025-0031Medium
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
- CVE-2025-52536Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
- CVE-2025-48517Medium
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Original NVD description (English source)
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS