PT-2026-7453 · Amd · Amd Sev
CVE-2025-48517
·
Publicado
2025-01-01
·
Atualizado
2026-02-10
CVSS v4.0
4.6
Média
| Vetor | AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
AMD SEV firmware (affected versions not specified)
Description
A flaw in the access control mechanism of SEV firmware may allow a user with elevated privileges and a compromised hypervisor to create a SEV-ES guest utilizing an ASID intended for SEV-SNP guests. This could lead to a reduction in data confidentiality.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Amd Sev