Lucene search
K

92 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в amd64-microcode

Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity...

4.4CVSS8.4AI score0.00199EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-29952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory,...

5.9CVSS6AI score0.00143EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-29946

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality...

4.5CVSS6AI score0.0014EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2025-0031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the...

4.6CVSS6AI score0.00112EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/16 7:30 p.m.8 views

CVE-2025-29946

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory...

4.5CVSS5.5AI score0.0014EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 8:16 p.m.6 views

CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS0.00112EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/02/10 8:16 p.m.4 views

CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS5.8AI score0.00112EPSS
Exploits0References2
OSV
OSV
added 2026/02/10 8:16 p.m.1 views

UBUNTU-CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS5.8AI score0.00112EPSS
Exploits0References3
OSV
OSV
added 2026/02/10 8:16 p.m.3 views

UBUNTU-CVE-2025-29946

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory...

4.5CVSS5.8AI score0.0014EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:15 p.m.4 views

CVE-2025-29946

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory...

4.5CVSS5.5AI score0.0014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 7:14 p.m.4 views

CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS5.5AI score0.00112EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 7:14 p.m.11 views

CVE-2025-0031

CVE-2025-0031 describes a use-after-free in the AMD SEV firmware that could allow a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially resulting in loss of integrity. Affected component: SEV firmware. Root ca...

4.6CVSS5.5AI score0.00112EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 7:14 p.m.31 views

CVE-2025-0031

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLESOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS0.00112EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 7:8 p.m.20 views

CVE-2025-48517

CVE-2025-48517 concerns AMD SEV firmware where insufficient granularity of access control could let a privileged attacker with a malicious hypervisor create a SEV-ES guest using an ASID reserved for SEV-SNP guests, potentially causing partial confidentiality loss. Reported across multiple sources...

4.6CVSS5.5AI score0.00136EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:7 p.m.4 views

CVE-2025-29948

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...

5.9CVSS5.5AI score0.00144EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-48517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in th...

4.6CVSS5.8AI score0.00136EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-52536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrit...

6.7CVSS5.8AI score0.00136EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:27 a.m.6 views

CVE-2023-31352

A bug in the SEV firmware may allow an attacker with privileges to read unencrypted memory, potentially resulting in loss of guest private data...

6CVSS6.7AI score0.00174EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-13127

Malware in sbrugna...

5.5CVSS5.5AI score0.00244EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-13210

Malware in sbrugna...

5.5CVSS5.6AI score0.00185EPSS
Exploits0References2
Rows per page
Query Builder