CVE-2025-48504

AMD use-after-free in SEV firmware compromises guest memory

medium · 6.8

AMD EPYC 9004 Series Processors

Published Nov 10, 2026, 22:13 UTC

Description

Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.