Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-0031

No fix known EPSS <1%CVSS 4.6

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9005 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9003 Series Processors, AMD EPYC™ Embedded 9005 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD EPYC™ Embedded 8004 Series Processors

Distro releases

ReleasePackageFixed in
Ubuntu 24.04 LTSamd64-microcodeno fix
Ubuntu 25.10amd64-microcodeno fix
Ubuntu 26.04 LTSamd64-microcodeno fix
Ubuntu 26.10amd64-microcodeno fix