CVE-2025-29939

Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - psirt@amd.com

Published

2026-02-10

Last modified

2026-02-10

Weaknesses

CWE-284

Affected products

• Amd Epyc 7003 Series Processors (Amd)
• Amd Epyc 8004 Series Processors (Amd)
• Amd Epyc 9004 Series Processors (Amd)
• Amd Epyc 9005 Series Processors (Amd)
• Amd Epyc Embedded 7003 Series Processors (Amd)
• Amd Epyc Embedded 8004 Series Processors (Amd)
• Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Bergamo (Amd)
• Amd Epyc Embedded 9004 Series Processors Formerly Codenamed Genoa (Amd)
• Amd Epyc Embedded 9005 Series Processors (Amd)

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html