p PatchFirst

CVE-2025-29952

CVE-2025-29952

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity

CVSS 5.9 · Medium · EPSS 0.2%

Published
Updated

Stack: system

Affected products and versions

  • amd epyc™ 9005 series processors

    Versions
    • TurinPI 1.0.0.6: Not affected

    No fix published

  • amd epyc™ embedded 9005 series processors

    Versions
    • EmbTurinPI-SP5_1.0.0.1: Not affected

    No fix published

  • amd64-microcode Ubuntu:24.04:LTS

    Versions
    • 3.20230808.1.1ubuntu1
    • 3.20231019.1ubuntu1
    • 3.20231019.1ubuntu2
    • 3.20231019.1ubuntu2.1
    • 3.20250311.1ubuntu0.24.04.1
    • 3.20251202.1ubuntu0.24.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • amd64-microcode Ubuntu:25.10

    Versions
    • 3.20240820.1ubuntu1
    • 3.20250311.1ubuntu1
    • 3.20250708.1ubuntu1
    • 3.20251202.1ubuntu0.25.10.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • amd64-microcode Ubuntu:26.10

    Versions
    • 3.20251202.1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • amd64-microcode Ubuntu:26.04:LTS

    Versions
    • 3.20250708.1ubuntu1
    • 3.20250708.1ubuntu2
    • 3.20251202.1ubuntu1
    • 3.20251202.1ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →