Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.
Search vulnerabilities
CVE-2025-29939
CVSS 4.0 · 6.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-29934
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-54514
Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.
CVSS 4.0 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-29946
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
CVSS 4.0 · 4.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products