{"id":"CVE-2025-48504","kind":"vulnerability","aliases":["CVE-2025-48504"],"related":[],"title":"AMD SEV firmware: use-after-release lets a hypervisor tamper with guest memory","description":"Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.","summary":"A flaw in the AMD Secure Encrypted Virtualization (SEV) firmware lets operations run on a resource after it has expired or been released. A malicious hypervisor could use this to manipulate metadata pages, which can break the confidentiality and integrity of guest virtual machine memory.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev"],"not_affected_if":["no-sev-guests","non-amd-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","triaged_at":"2026-11-10T23:28:45+00:00","updated_at":"2026-11-10T23:28:45+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T23:28:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: use-after-release lets a hypervisor tamper with guest memory","impact":"high","summary":"A flaw in the AMD Secure Encrypted Virtualization (SEV) firmware lets operations run on a resource after it has expired or been released. A malicious hypervisor could use this to manipulate metadata pages, which can break the confidentiality and integrity of guest virtual machine memory.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","confidential-computing","hypervisor"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"hypervisor reads and alters guest VM memory integrity","analyst_note":"Check AMD's security bulletin for the affected SEV firmware versions and fixed releases; the NVD entry alone names none.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["non-amd-hardware","no-sev-guests"],"who_is_affected":"Affects hosts running AMD EPYC processors with SEV firmware to protect virtual machines; the attacker must already control the hypervisor. Teams running only non-AMD hardware or without confidential-VM workloads can skip it. The sources do not name affected firmware versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000705,"input_tokens":4538,"output_tokens":502,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':16A,19A '-48504':17A,20A 'allow':89C 'amd':1A,21B,32B 'break':63B 'comput':24B 'confidenti':23B,65B,103C 'confidential-comput':22B 'could':54B,88C 'cve':15A,18A 'encrypt':34B,84C 'expir':47B,78C 'firmwar':3A,37B,87C 'flaw':29B 'guest':13A,69B,107C 'hypervisor':10A,25B,53B,92C 'infrastructur':26B 'integr':67B,105C 'let':8A,38B 'loss':101C 'machin':71B 'malici':52B,91C 'manipul':58B,94C 'memori':14A,72B,108C 'metadata':59B,95C 'oper':39B,73C 'page':60B,96C 'potenti':97C 'releas':7A,50B,80C 'resourc':43B,76C 'result':98C 'run':40B 'secur':33B,83C 'sev':2A,27B,36B,86C 'tamper':11A 'use':5A,55B 'use-after-releas':4A 'virtual':35B,70B,85C","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running AMD EPYC processors with SEV firmware to protect virtual machines; the attacker must already control the hypervisor. Teams running only non-AMD hardware or without confidential-VM workloads can skip it. The sources do not name affected firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev"],"campaign_type":null,"search_a":"'-2025':16A,19A '-48504':17A,20A 'amd':1A 'cve':15A,18A 'firmwar':3A 'guest':13A 'hypervisor':10A 'let':8A 'memori':14A 'releas':7A 'sev':2A 'tamper':11A 'use':5A 'use-after-releas':4A","search_b":"'amd':21B,32B 'break':63B 'comput':24B 'confidenti':23B,65B 'confidential-comput':22B 'could':54B 'encrypt':34B 'expir':47B 'firmwar':37B 'flaw':29B 'guest':69B 'hypervisor':25B,53B 'infrastructur':26B 'integr':67B 'let':38B 'machin':71B 'malici':52B 'manipul':58B 'memori':72B 'metadata':59B 'oper':39B 'page':60B 'releas':50B 'resourc':43B 'run':40B 'secur':33B 'sev':27B,36B 'use':55B 'virtual':35B,70B","search_c":"'allow':89C 'confidenti':103C 'could':88C 'encrypt':84C 'expir':78C 'firmwar':87C 'guest':107C 'hypervisor':92C 'integr':105C 'loss':101C 'malici':91C 'manipul':94C 'memori':108C 'metadata':95C 'oper':73C 'page':96C 'potenti':97C 'releas':80C 'resourc':76C 'result':98C 'secur':83C 'sev':86C 'virtual':85C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:19+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-48504","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48504","severity":null,"published_at":"2026-11-10T23:17:19+00:00","modified_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","fetched_at":"2026-11-10T23:27:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}