VULNERABILITY INTELLIGENCE
CVE-2025-29946
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
Description
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.
Weakness classification
- psirt@amd.com: CWE-1301