CVE-2025-29952
MediumSummary
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
Risk Assessment
The risk involves potential compromise of guest memory integrity, enabling an attacker to modify guest data or bypass SEV protections.
Recommendation
Immediately update the AMD SEV firmware to the latest version provided by the vendor and restrict administrative access to systems using SEV.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29948Medium
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
- CVE-2025-29946Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- CVE-2025-0031Medium
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
- CVE-2025-52536Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
- CVE-2025-48517Medium
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Original NVD description (English source)
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity
Vulnerability data from NVD (NIST) · CISA KEV · EPSS