Description
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Published: 2026-02-10
Score: 4.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 12 Feb 2026 11:30:00 +0000

Type Values Removed Values Added
First Time appeared Amd
Amd epyc 9005 Series Processors
Amd epyc Embedded 9005 Series Processors
Vendors & Products Amd
Amd epyc 9005 Series Processors
Amd epyc Embedded 9005 Series Processors

Tue, 10 Feb 2026 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 10 Feb 2026 19:45:00 +0000

Type Values Removed Values Added
Description Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Weaknesses CWE-1301
References
Metrics cvssV4_0

{'score': 4.5, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N'}

Subscriptions

Amd Epyc 9005 Series Processors Epyc Embedded 9005 Series Processors
cve-icon MITRE

Status: PUBLISHED

Assigner: AMD

Published:

Updated: 2026-02-10T21:42:14.335Z

Reserved: 2025-03-12T15:15:04.910Z

Link: CVE-2025-29946

cve-icon Vulnrichment

Updated: 2026-02-10T21:42:10.413Z

cve-icon NVD

Status : Deferred

Published: 2026-02-10T20:16:44.057

Modified: 2026-04-15T00:35:42.020

Link: CVE-2025-29946

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-02-12T11:19:35Z

Weaknesses