The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
[
{
"product": "SEV/SEV-ES",
"vendor": "AMD",
"versions": [
{
"lessThan": "SEV-SNP",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]