CVE-2025-0029 Other in AMD EPYC™ 9005 Series Processors

Low 1.8 Published Updated

A local high-privileged attacker can drop guest DMA writes during host-induced faults, compromising SEV-SNP guest memory integrity on AMD EPYC processors.

Exploited in the wild
Not known
Login needed
An administrator
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-0029?

CVE-2025-0029 is a low-severity vulnerability in AMD EPYC™ 9005 Series Processors, published on 10 Feb 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory integrity

Weakness: CWE-390

Which versions are affected by CVE-2025-0029?

How do I fix CVE-2025-0029?

No fix has been published for CVE-2025-0029 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-0029 being exploited?

There is no known exploitation of CVE-2025-0029 in the wild and no public exploit code.

Sources

Also known as GHSA-gc45-pr9v-jw83.

Is CVE-2025-0029 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free