CVE-2025-29939: AMD EPYC™ 9004 Series Processors, заобикаляне на вход

Описание

Оригинално описание

Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.

Засегнати продукти

• AMD AMD EPYC™ 9004 Series Processors: GenoaPI 1.0.0.G
• AMD AMD EPYC™ 7003 Series Processors: MilanPI 1.0.0.H
• AMD AMD EPYC™ 9005 Series Processors: TurinPI 1.0.0.6
• AMD AMD EPYC™ 8004 Series Processors: GenoaPI 1.0.0.G
• AMD AMD EPYC™ Embedded 7003 Series Processors: EmbMilanPI-SP3 v9 1.0.0.C
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa"): EmbGenoaPI-SP5 1.0.0.B
• AMD AMD EPYC™ Embedded 9005 Series Processors: EmbTurinPI-SP5_1.0.0.1
• AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo"): EmbGenoaPI-SP5 1.0.0.B
• AMD AMD EPYC™ Embedded 8004 Series Processors: EmbGenoaPI-SP5 1.0.0.B

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в AMD AMD EPYC™ 9004 Series Processors

• 5.3CVE-2024-21944
• 4.0CVE-2025-54509
• 6.9CVE-2025-0045
• 8.5CVE-2026-0432
• 6.9CVE-2025-48521

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-29939
• https://nvd.nist.gov/vuln/detail/CVE-2025-29939
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html