SEV Improper Access Control in Secure Nested Paging (SNP)
CVE-2025-29939 Published on February 10, 2026
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialization, potentially resulting in a loss of guest memory confidentiality and integrity.
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2025-29939 has been classified to as an Authorization vulnerability or weakness.
Affected Versions
AMD EPYC™ 9004 Series Processors:- Version GenoaPI 1.0.0.G is unaffected.
- Version MilanPI 1.0.0.H is unaffected.
- Version TurinPI 1.0.0.6 is unaffected.
- Version GenoaPI 1.0.0.G is unaffected.
- Version EmbMilanPI-SP3 v9 1.0.0.C is unaffected.
- Version EmbGenoaPI-SP5 1.0.0.B is unaffected.
- Version EmbTurinPI-SP5_1.0.0.1 is unaffected.
- Version EmbGenoaPI-SP5 1.0.0.B is unaffected.
- Version EmbGenoaPI-SP5 1.0.0.B is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.