VULNERABILITY INTELLIGENCE
CVE-2025-48517
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
Description
Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.
Weakness classification
- psirt@amd.com: CWE-1220