4.5
Medium
CVE-2025-29946 Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU
Description
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AMD EPYC™ 9005 Series Processors | Versions not published | |
| AMD EPYC™ Embedded 9005 Series Processors | Versions not published |
References
- www.amd.com www.amd.com
Timeline
- Published
- Last modified
Other CVEs of AMD EPYC™ 9005 Series Processors
The 27 CVEs of AMD EPYC™ 9005 Series Processors →
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a…
4.0
Medium
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to…
8.5
High
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)…
7.0
High
CVE-2025-61972
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System…
8.5
High