CVE-2025-48517
MediumSummary
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Risk Assessment
The risk involves potential leakage of confidential data from SEV-SNP virtual machines, which are protected from hypervisor access. An attacker could exploit this vulnerability to read fragments of other guests' memory, breaking the isolation provided by AMD SEV.
Recommendation
Immediately apply patches provided by the platform vendor (AMD) for the SEV firmware. Also monitor security advisories for microcode and BIOS updates.
Original NVD description (English source)
Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.