CVE-2025-48514: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-48514 is an insufficient granularity of access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware that allows a privileged attacker to create an SEV-ES guest capable of attacking an SEV-SNP guest, potentially resulting in a loss of confidentiality. It was discovered internally by AMD and publicly disclosed on February 10, 2026, as part of AMD Security Bulletin AMD-SB-3023. Affected products include AMD EPYC 7003 (Milan), 8004 (Siena), 9004 (Bergamo/Genoa), and 9005 (Turin/Turin Dense) series processors, as well as their embedded counterparts. The vulnerability carries a CVSS v4.0 base score of 4.0 (Medium) (AMD Advisory).

The root cause is classified as CWE-1220 (Insufficient Granularity of Access Control) in the SEV firmware. The flaw allows a privileged attacker — operating with a malicious hypervisor — to create an SEV-ES guest assigned an Address Space ID (ASID) that falls within the range reserved for SEV-SNP guests, violating the isolation boundary between these two virtualization modes. Exploitation requires local access, high privileges, and specific attack preconditions (AT:P in CVSS v4.0 terms), meaning the attacker must already control the hypervisor layer. Notably, AMD's mitigation note states that applying the fix for CVE-2025-48514 will result in disabling SEV-ES when SEV-SNP is enabled (AMD Advisory).

Successful exploitation results in a partial loss of confidentiality for SEV-SNP guest memory, as a malicious SEV-ES guest could potentially read or infer data belonging to an SNP-protected guest. The impact is confined to the virtualized environment — specifically the sub-system confidentiality (SC:H in CVSS v4.0) — with no direct integrity or availability impact reported. This is particularly relevant in multi-tenant cloud or data center environments where SEV-SNP is used to provide hardware-enforced memory isolation between guest VMs (AMD Advisory).

There is no known public exploit code or evidence of in-the-wild exploitation for CVE-2025-48514. The vulnerability was discovered internally by AMD and disclosed through coordinated vulnerability disclosure. The EPSS score is approximately 0.012%, reflecting very low probability of near-term exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation is constrained by the requirement for high privileges (hypervisor-level control) and specific attack preconditions, significantly limiting the attacker population (AMD Advisory).

AMD recommends updating to the patched Platform Initialization (PI) firmware or SEV firmware versions provided through OEM BIOS updates. Key mitigations by platform include: EPYC 7003 (Milan): MilanPI 1.0.0.H (2025-09-04) with SEV FW 1.37.23, SPL[SEV]=0x1B; EPYC 8004/9004 (Siena/Bergamo/Genoa): GenoaPI 1.0.0.H (2025-12-15) with SEV FW 1.37.31, SPL[SEV]=0x1B; EPYC 9005 (Turin/Turin Dense): TurinPI 1.0.0.6 (2025-06-30) with SEV FW 1.37.41, SPL[SEV]=0x4; Embedded variants: EmbMilanPI-SP3 v9 1.0.0.C, EmbGenoaPI-SP5 1.0.0.C, EmbTurinPI-SP5 1.0.0.1 (all 2025-10-31). Administrators should be aware that applying this mitigation disables SEV-ES when SEV-SNP is enabled. Contact your OEM for the specific BIOS update applicable to your hardware (AMD Advisory).

AMD disclosed CVE-2025-48514 as part of a broader February 2026 security bulletin (AMD-SB-3023) covering over 20 CVEs affecting EPYC processors. HPE issued a corresponding advisory (HPESC HPESBHF04999) for affected HPE server products. Dell also published a security update (DSA-2026-188) referencing the bulletin for Dell AX systems. Community and researcher attention has been moderate, with aggregator sites and threat intelligence platforms tracking the disclosure, but no significant independent researcher commentary or social media discussion has been identified (AMD Advisory, HPE Advisory).