cve-2024-21978-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of a running SEV-SNP guest. Tested on version 1.55.16 latest as of the time of writing. Root Cause The nvpaddr field of the SEVINITEX command can be use...

USN-9091-1 linux-nvidia-tegra vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-9091-1: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

CVE-2025-54501

A vulnerability exists due to improper access control on an internal debug interface, as identified in CVE-2025-54501 . This flaw could allow a high privileged attacker to bypass memory access controls, potentially leading to a loss of SEV-SNP guest memory integrity . The issue is associated with...

CVE-2025-54501

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2025-211317

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

CVE-2025-54501: AMD: Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access…

Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity...

USN-9040-1 linux-nvidia-lowlatency vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

EUVD-2026-123046

Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality...

EUVD-2026-123041

An off-by-one error in AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with hypervisor access to corrupt the Reverse Map Table RMP table, potentially resulting in loss of guest memory integrity...

EUVD-2025-211298

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP guest memory...

EUVD-2025-211290

Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity...

EUVD-2025-211296

Improper access control within the AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity...

CVE-2026-0480

Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality...

CVE-2025-62620

Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity...

CVE-2025-52537

Improper access control within the AMD Secure Encrypted Virtualization SEV firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity...

CVE-2025-0027

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass Reverse Map Table RMP protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP guest memory...

CVE-2026-0480

The AMD Secure Encrypted Virtualization (SEV) firmware is vulnerable to a missing authentication for critical functions (CWE-306 ). This flaw could allow a malicious hypervisor to forge SEV-TIO guest request messages , potentially leading to a compromise of SEV-SNP guest memory integrity and conf...

CVE-2025-0027

A vulnerability exists in the AMD Secure Encrypted Virtualization (SEV) firmware due to improper access control . This flaw could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially compromising the integrity of guest memory within Secure Encrypted Virtualizati...

CVE-2025-29940

Unverified ownership in Secure Encrypted Virtualization SEV firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table RMP is enabled potentially resulting in loss of guest data integrity...