Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-29939

Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initiali

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9004 Series Processors

Default version status: affected

  • GenoaPI 1.0.0.Gunaffected

AMD AMD EPYC™ 7003 Series Processors

Default version status: affected

  • MilanPI 1.0.0.Hunaffected

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI 1.0.0.6unaffected

AMD AMD EPYC™ 8004 Series Processors

Default version status: affected

  • GenoaPI 1.0.0.Gunaffected

AMD AMD EPYC™ Embedded 7003 Series Processors

Default version status: affected

  • EmbMilanPI-SP3 v9 1.0.0.Cunaffected

AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 9005 Series Processors

Default version status: affected

  • EmbTurinPI-SP5_1.0.0.1unaffected

AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Bunaffected

AMD AMD EPYC™ Embedded 8004 Series Processors

Default version status: affected

  • EmbGenoaPI-SP5 1.0.0.Bunaffected

References