CVE-2025-29940: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table (RMP) is enabled potentially resulting in loss of guest data integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·09:45 PM

Data Sourced

via MITRE·09:45 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using AMD SEV firmware with segmented Reverse Map Table (RMP) enabled are exposed when a privileged attacker can operate or access a malicious hypervisor.

What level of access does an attacker need?

The attacker needs high privileges and access to a malicious hypervisor. The listed attack vector is local, and no user interaction is required.

What is the likely security impact?

A successful attacker could overwrite guest memory, causing loss of guest data integrity. The supplied impact data does not indicate confidentiality or availability impact.

CVE-2025-29940: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What is the likely security impact?