AMD Secure Encrypted Virtualization Firmware Improper Initialization Vulnerability Allowing Memory Integrity Corruption
Vulnerability
A vulnerability exists in the AMD Secure Encrypted Virtualization (SEV) firmware due to improper initialization. This issue can enable an admin-privileged attacker to corrupt memory covered by the reverse map page (RMP), potentially leading to a loss of integrity in guest memory.
Impact
Exploitation of this vulnerability could result in unauthorized corruption of RMP-covered memory, causing a loss of integrity in guest memory.
Remediation
Users are advised to update to the AMD EPYC Platform Initialization (PI) firmware version 1.0.0.6, released on June 30, 2025. For specific BIOS update details, please contact your OEM.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
