AMD EPYC Processors SEV Access Control Vulnerability During SNP Initialization

A vulnerability exists in AMD EPYC processors that support Secure Encrypted Virtualization (SEV), specifically during the initialization of Secure Nested Paging (SNP). Improper access control could allow a privileged attacker to write to the reverse map page (RMP), potentially compromising the confidentiality and integrity of guest memory. This issue affects several different versions and ranges of AMD EPYC processors, both server and embedded series.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of the reverse map page, causing a loss of confidentiality and integrity in guest memory during SEV-SNP operations.

Remediation

Users are advised to update to the latest Platform Initialization (PI) or Secure Encrypted Virtualization (SEV) firmware version. Specific update details can be found in the AMD EPYC Processor Vulnerabilities bulletin.