CVE Catalog
CVE-2025-29952
MediumSummary
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
Risk Assessment
The risk involves potential compromise of guest memory integrity, enabling an attacker to modify guest data or bypass SEV protections.
Recommendation
Immediately update the AMD SEV firmware to the latest version provided by the vendor and restrict administrative access to systems using SEV.
Original NVD description (English source)
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity