4.5
Moyenne
CVE-2025-29946 Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU
Description
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMD EPYC™ 9005 Series Processors | Versions non publiées | |
| AMD EPYC™ Embedded 9005 Series Processors | Versions non publiées |
Autres CVE de AMD EPYC™ 9005 Series Processors
Les 27 CVE de AMD EPYC™ 9005 Series Processors →
CVE-2025-54509
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a…
4.0
Moyenne
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to…
8.5
Élevée
CVE-2025-48512
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)…
7.0
Élevée
CVE-2025-61972
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System…
8.5
Élevée