CVE-2025-48509
MediumSummary
Missing checks in certain functions related to RMP initialization allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity.
Risk Assessment
The risk involves potential compromise of guest memory integrity, which could allow an attacker to modify data or code within the guest environment, leading to privilege escalation or information disclosure.
Recommendation
It is recommended to immediately apply security patches provided by the virtualization platform vendor and restrict administrative access to the system to trusted users only.
Original NVD description (English source)
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity