CVE-2025-29946
CVE-2025-29946
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
CVSS 4.5 · Medium · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
amd epyc™ 9005 series processors
- Versions
- TurinPI 1.0.0.6: Not affected
No fix published
amd epyc™ embedded 9005 series processors
- Versions
- EmbTurinPI-SP5_1.0.0.1: Not affected
No fix published
amd64-microcode Ubuntu:24.04:LTS
- Versions
- 3.20230808.1.1ubuntu1
- 3.20231019.1ubuntu1
- 3.20231019.1ubuntu2
- 3.20231019.1ubuntu2.1
- 3.20250311.1ubuntu0.24.04.1
- 3.20251202.1ubuntu0.24.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:25.10
- Versions
- 3.20240820.1ubuntu1
- 3.20250311.1ubuntu1
- 3.20250708.1ubuntu1
- 3.20251202.1ubuntu0.25.10.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.10
- Versions
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
amd64-microcode Ubuntu:26.04:LTS
- Versions
- 3.20250708.1ubuntu1
- 3.20250708.1ubuntu2
- 3.20251202.1ubuntu1
- 3.20251202.1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published