CVE-2025-0031
No fix known EPSS <1%CVSS 4.6
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.
Products: AMD EPYC™ 9004 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9005 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 9003 Series Processors, AMD EPYC™ Embedded 9005 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD EPYC™ Embedded 8004 Series Processors
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 24.04 LTS | amd64-microcode | no fix |
| Ubuntu 25.10 | amd64-microcode | no fix |
| Ubuntu 26.04 LTS | amd64-microcode | no fix |
| Ubuntu 26.10 | amd64-microcode | no fix |