Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-29948

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-S

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AMD

Description

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AMD AMD EPYC™ 9005 Series Processors

Default version status: affected

  • TurinPI 1.0.0.6unaffected

AMD AMD EPYC™ Embedded 9005 Series Processors

Default version status: affected

  • EmbTurinPI-SP5_1.0.0.1unaffected

References