CVE-2025-48504: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·10:13 PM

Data Sourced

via MITRE·10:13 PM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must control a malicious hypervisor. The issue is relevant where an untrusted or compromised hypervisor can interact with SEV firmware.

What is the potential impact on affected guests?

A malicious hypervisor may manipulate metadata pages after a resource has expired or been released. This can potentially compromise the confidentiality and integrity of guest memory.

CVE-2025-48504: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact on affected guests?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact on affected guests?