Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-29946

No fix known EPSS <1%CVSS 4.5

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9005 Series Processors, AMD EPYC™ Embedded 9005 Series Processors

Distro releases

ReleasePackageFixed in
Ubuntu 24.04 LTSamd64-microcodeno fix
Ubuntu 25.10amd64-microcodeno fix
Ubuntu 26.04 LTSamd64-microcodeno fix
Ubuntu 26.10amd64-microcodeno fix