{"id":"CVE-2025-29941","kind":"vulnerability","aliases":["CVE-2025-29941"],"related":[],"title":"AMD SEV firmware: weak random seeds let a hypervisor forge guest context","description":"Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys.","summary":"AMD Secure Encrypted Virtualization (SEV) firmware uses seeds incorrectly in its pseudo-random number generator. A malicious hypervisor or migration agent could import a forged guest context, potentially exposing derived guest keys.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev"],"not_affected_if":["no-sev-guests"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","triaged_at":"2026-11-10T23:28:50+00:00","updated_at":"2026-11-10T23:28:50+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T23:28:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: weak random seeds let a hypervisor forge guest context","impact":"medium","summary":"AMD Secure Encrypted Virtualization (SEV) firmware uses seeds incorrectly in its pseudo-random number generator. A malicious hypervisor or migration agent could import a forged guest context, potentially exposing derived guest keys.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","hypervisor","confidential-computing"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Guest encryption keys may be exposed through a forged guest context","analyst_note":"Find AMD's security bulletin for CVE-2025-29941 to get affected firmware versions and the fixed firmware release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-sev-guests"],"who_is_affected":"Affects hosts running AMD EPYC processors with SEV-enabled virtual machines, where the hypervisor or migration tooling is the attacker's position. The sources do not name affected firmware versions or a patch. Teams not using SEV guests are not exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000693,"input_tokens":4553,"output_tokens":475,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':14A,17A '-29941':15A,18A 'agent':47B,83C 'allow':77C 'amd':1A,19B,26B 'comput':22B 'confidenti':21B,95C 'confidential-comput':20B 'context':12A,53B,89C 'could':48B,76C 'cve':13A,16A 'deriv':56B,97C 'encrypt':28B,72C 'expos':55B 'firmwar':3A,31B,75C 'forg':10A,51B,87C 'generat':41B,68C 'guest':11A,52B,57B,88C,98C 'hypervisor':9A,23B,44B,80C 'import':49B,85C 'incorrect':34B,59C 'infrastructur':24B 'key':58B,99C 'let':7A 'loss':93C 'malici':43B,79C 'migrat':46B,82C 'number':40B,67C 'potenti':54B,90C 'pseudo':38B,65C 'pseudo-random':37B,64C 'random':5A,39B,66C 'result':91C 'secur':27B,71C 'seed':6A,33B,62C 'sev':2A,25B,30B,74C 'usag':60C 'use':32B 'virtual':29B,73C 'weak':4A","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running AMD EPYC processors with SEV-enabled virtual machines, where the hypervisor or migration tooling is the attacker's position. The sources do not name affected firmware versions or a patch. Teams not using SEV guests are not exposed.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev"],"campaign_type":null,"search_a":"'-2025':14A,17A '-29941':15A,18A 'amd':1A 'context':12A 'cve':13A,16A 'firmwar':3A 'forg':10A 'guest':11A 'hypervisor':9A 'let':7A 'random':5A 'seed':6A 'sev':2A 'weak':4A","search_b":"'agent':47B 'amd':19B,26B 'comput':22B 'confidenti':21B 'confidential-comput':20B 'context':53B 'could':48B 'deriv':56B 'encrypt':28B 'expos':55B 'firmwar':31B 'forg':51B 'generat':41B 'guest':52B,57B 'hypervisor':23B,44B 'import':49B 'incorrect':34B 'infrastructur':24B 'key':58B 'malici':43B 'migrat':46B 'number':40B 'potenti':54B 'pseudo':38B 'pseudo-random':37B 'random':39B 'secur':27B 'seed':33B 'sev':25B,30B 'use':32B 'virtual':29B","search_c":"'agent':83C 'allow':77C 'confidenti':95C 'context':89C 'could':76C 'deriv':97C 'encrypt':72C 'firmwar':75C 'forg':87C 'generat':68C 'guest':88C,98C 'hypervisor':80C 'import':85C 'incorrect':59C 'key':99C 'loss':93C 'malici':79C 'migrat':82C 'number':67C 'potenti':90C 'pseudo':65C 'pseudo-random':64C 'random':66C 'result':91C 'secur':71C 'seed':62C 'sev':74C 'usag':60C 'virtual':73C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:18+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-29941","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29941","severity":null,"published_at":"2026-11-10T23:17:18+00:00","modified_at":"2026-11-10T23:17:18+00:00","first_seen_at":"2026-11-10T23:27:34+00:00","fetched_at":"2026-11-10T23:27:34+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}