27 matches found
CVE-2026-40669
An off-by-one error in AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with hypervisor access to corrupt the Reverse Map Table RMP table, potentially resulting in loss of guest memory integrity...
CVE-2025-0027
Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP guest memory...
CVE-2025-52535
Improper resource reuse in the AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with hypervisor access to write to the Reverse Map Table RMP protected memory, potentially resulting in loss of guest memory integrity...
CVE-2025-62621
Expected behavior violation in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP guest memory integrity...
AMD Secure Encrypted Virtualization (SEV) Vulnerabilities
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-0027| Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially impacting...
USN-8888-2 linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
USN-8888-2: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
RMP Component Data Compromise
The vulnerability of the RMP Reverse Map Table component of AMD’s microprogramming system processors is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to compromise the integrity of the protected information...
CVE-2025-0012
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
UBUNTU-CVE-2025-0012
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
CVE-2025-0012
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
CVE-2025-0012
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
CVE-2025-0012
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
PT-2026-7443
Improper handling of overlap between the segmented reverse map table RMP and system management mode SMM memory could allow a privileged attacker corrupt or partially infer SMM memory resulting in loss of integrity or confidentiality...
Linux Distros Unpatched Vulnerability : CVE-2025-0033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a lo...
RMPocalypse: Single 8-Byte Write Shatters AMD’s SEV-SNP Confidential Computing
Chipmaker AMD has released fixes to address a security flaw dubbed RMPocalypse that could be exploited to undermine confidential computing guarantees provided by Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP. The attack, per ETH Zürich researchers Benedict Schlüter and Shweta...
AMD CVE-2025-0033: RMP Corruption During SNP Initialization
Microsoft is aware of AMD-SB-3020 | CVE-2025-0033 disclosed by AMD on October 13, 2025. CVE-2025-0033 is a vulnerability in AMD EPYC processors using Secure Encrypted Virtualization – Secure Nested Paging SEV-SNP. It involves a race condition during Reverse Map Table RMP initialization that could...
PT-2025-41795
Name of the Vulnerable Software and Affected Versions AMD EPYC and EPYC Embedded series processors versions prior to BIOS updates from OEM partners AMD EPYC processors using Secure Encrypted Virtualization – Secure Nested Paging SEV-SNP affected versions not specified Description A critical issue...
SEV-SNP RMP Initialization Vulnerability
Summary Researchers from ETHz reported that a malicious hypervisor could corrupt the Reverse Map Table RMP during Secure Nested Paging SNP initialization. AMD reproduced the issue and determined it is due to a race condition that can occur while the AMD Secure Processor ASP is initializing the RM...
