PT-2026-7448 · Amd · Amd Secure Encrypted Virtualization

Published 2026-02-10 · Updated 2026-02-11 · CVE-2025-29948

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions AMD Secure Encrypted Virtualization (SEV) firmware (affected versions not specified)

Description An access control issue in AMD Secure Encrypted Virtualization (SEV) firmware may allow a malicious hypervisor to circumvent RMP protections. This could lead to a compromise of SEV-SNP guest memory integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-1260

Related Identifiers

CVE-2025-29948

Affected Products

Amd Secure Encrypted Virtualization

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-29948 · Security Note
• https://ubuntu.com/security/CVE-2025-29948 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29948 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29948 · Security Note
• https://twitter.com/VulmonFeeds/status/2021462578824671350 · Twitter Post
• https://amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html · Note
• https://t.me/CVEtracker/44337 · Telegram Post