CVE-2025-29934

Medium

Description

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.

SeverityMedium
CVSS5.3
Exploit probability—
ProductAMD EPYC™ 9004 Series Processors
PublishedNov 21, 2025
First seenNov 21, 2025
Weakness typeCWE-459CWE-459

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
AMD AMD EPYC™ 9004 Series ProcessorsNo range specified—
AMD AMD EPYC™ 9005 Series ProcessorsNo range specified—
AMD AMD EPYC™ 8004 Series ProcessorsNo range specified—
AMD AMD EPYC™ Embedded 7003 Series ProcessorsNo range specified—
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")No range specified—
AMD AMD EPYC™ Embedded 9005 Series ProcessorsNo range specified—
AMD AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")No range specified—
AMD AMD EPYC™ Embedded 8004 Series ProcessorsNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-29934 · AMD EPYC™ 9004 Series Processors · Dark Radar