AMD Secure Encrypted Virtualization Firmware Improper Access Control Vulnerability Allowing Hypervisor to Bypass RMP Protections

A vulnerability exists in AMD Secure Encrypted Virtualization (SEV) firmware, where improper access control could enable a malicious hypervisor to bypass reverse map table (RMP) protections. This flaw may lead to a loss of memory integrity for guests utilizing SEV-Secure Nested Paging (SNP).

Impact

Exploitation of this vulnerability could result in a loss of memory integrity for SEV-SNP guests.

Remediation

Users are advised to update to the AMD EPYC Embedded 9005 Series Processors 'Turin' or 'Turin Dense' version 1.0.0.6. For AMD EPYC Embedded 9004 Series Processors, the update should be applied via the 'EmbGenoaPI-SP5 1.0.0.C' version.