CVE-2025-62621 · Infrastructure
NO FIX YET
AMD Secure Encrypted Virtualization firmware has an expected-behavior violation that lets a malicious hypervisor bypass Reverse Map Table protections. An attacker controlling the hypervisor could alter memory of SEV-SNP guests, losing their memory integrity.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only operators running confidential VMs with AMD SEV-SNP on AMD hardware are exposed, and the flaw requires a malicious or compromised hypervisor to be exploited. The sources do not list affected firmware versions or a fix, so the vendor's advisory must be checked for those details.
Not affected if managed-hosting, no-sev-snp
Who cares amd, confidential-computing, hypervisor, sev-snp
No fix yet, per the sources.
Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.