PT-2026-144844
CVE-2026-28248
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 4.0
5.9
MediumMetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an ID key digest for an ID block that doesn't match the guest's measurement resulting in loss of integrity.
Found an issue in the description? Have something to add? Feel free to write us 👾