CVE-2025-48517
MediumSummary
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Risk Assessment
The risk involves potential leakage of confidential data from SEV-SNP virtual machines, which are protected from hypervisor access. An attacker could exploit this vulnerability to read fragments of other guests' memory, breaking the isolation provided by AMD SEV.
Recommendation
Immediately apply patches provided by the platform vendor (AMD) for the SEV firmware. Also monitor security advisories for microcode and BIOS updates.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29952Medium
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
- CVE-2025-29948Medium
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
- CVE-2025-29946Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- CVE-2025-0031Medium
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
- CVE-2025-52536Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
Original NVD description (English source)
Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS