CVE-2025-29934

Published: Nov 21, 2025Modified: Jun 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

Exploitability: 0.8 / Impact: 4.0

Source: psirt@amd.com (Secondary)

Description

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.

Related CWEs

CWE-459

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (1)

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3029.html

Source: psirt@amd.com

Timeline

No history available yet.