CVE-2025-29948: medium-severity vulnerability in AMD EPYC™ 9005 Series Processors
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in AMD's SEV secure virtualization firmware allows a malicious hypervisor to bypass memory protections, putting guest data integrity at risk. This affects systems relying on AMD's secure encryption features to protect sensitive workloads.
Improper access control in AMD SEV firmware enables a hypervisor-level attacker to circumvent Reverse Map Table (RMP) protections, compromising SEV-SNP guest memory isolation. The vulnerability requires hypervisor-level access and could result in unauthorized guest memory modification, violating the security guarantees of encrypted virtualization.
In the same product, most dangerous first.