CVE-2025-29939
CVE-2025-29939
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.
CVSS 6.9 · Medium · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
amd epyc™ 9004 series processors
- Versions
- GenoaPI 1.0.0.G: Not affected
No fix published
amd epyc™ 7003 series processors
- Versions
- MilanPI 1.0.0.H: Not affected
No fix published
amd epyc™ 9005 series processors
- Versions
- TurinPI 1.0.0.6: Not affected
No fix published
amd epyc™ 8004 series processors
- Versions
- GenoaPI 1.0.0.G: Not affected
No fix published
amd epyc™ embedded 7003 series processors
- Versions
- EmbMilanPI-SP3 v9 1.0.0.C: Not affected
No fix published
amd epyc™ embedded 9004 series processors (formerly codenamed "genoa")
- Versions
- EmbGenoaPI-SP5 1.0.0.B: Not affected
No fix published
amd epyc™ embedded 9005 series processors
- Versions
- EmbTurinPI-SP5_1.0.0.1: Not affected
No fix published
amd epyc™ embedded 9004 series processors (formerly codenamed "bergamo")
- Versions
- EmbGenoaPI-SP5 1.0.0.B: Not affected
No fix published
amd epyc™ embedded 8004 series processors
- Versions
- EmbGenoaPI-SP5 1.0.0.B: Not affected
No fix published
amd64-microcode Ubuntu:24.04:LTS
- Versions
- 3.20230808.1.1ubuntu1
- 3.20231019.1ubuntu1
- 3.20231019.1ubuntu2
- 3.20231019.1ubuntu2.1
- 3.20250311.1ubuntu0.24.04.1
- 3.20251202.1ubuntu0.24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:25.10
- Versions
- 3.20240820.1ubuntu1
- 3.20250311.1ubuntu1
- 3.20250708.1ubuntu1
- 3.20251202.1ubuntu0.25.10.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.10
- Versions
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.04:LTS
- Versions
- 3.20250708.1ubuntu1
- 3.20250708.1ubuntu2
- 3.20251202.1ubuntu1
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published