Bug 2571338 (CVE-2025-0027)
| Summary: | CVE-2025-0027 sev: AMD SEV firmware: Guest memory integrity compromise via improper access control | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | Keywords: | Security |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in AMD Secure Encrypted Virtualization (SEV) firmware. Due to improper access control, an attacker with administrative access to the host hypervisor can bypass Reverse Map Table (RMP) protections. This vulnerability allows the attacker to alter and compromise the data integrity of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest virtual machine memory.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2026-11-10 21:51:52 UTC
|