Skip to content
CVE PROGRAM SOURCE RECORD4.5 Medium

CVE-2025-29946

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in gue

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI 1.0.0.6unaffected

AMD AMD EPYC™ Embedded 9005 Series Processors

Default version status: affected

  • EmbTurinPI-SP5_1.0.0.1unaffected

References