CVE-2025-48517

No fix known EPSS <1%CVSS 4.6

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.

Published 2026-02-10 · CVE record · OSV

Products: AMD EPYC™ 9005 Series Processors, AMD EPYC™ Embedded 9005 Series Processors

Distro releases