Medium
amd64-microcode — security advisory
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity
- Products
- amd64-microcode
- Affected versions
- 3.20230808.1.1ubuntu1, 3.20231019.1ubuntu1, 3.20231019.1ubuntu2, 3.20231019.1ubuntu2.1, 3.20240820.1ubuntu1, 3.20250311.1ubuntu0.24.04.1, 3.20250311.1ubuntu1, 3.20250708.1ubuntu1, 3.20250708.1ubuntu2, 3.20251202.1ubuntu0.24.04.1, 3.20251202.1ubuntu0.25.10.1, 3.20251202.1ubuntu1, 3.20251202.1ubuntu2
- Fixed versions
- Not specified
- CVEs
- CVE-2025-29952
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:47 UTC · Revision 1
Source evidence
Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity
osv:UBUNTU-CVE-2025-29952
amd64-microcode
Fixed versions: Not specified
amd64-microcode
Fixed versions: Not specified
amd64-microcode
Fixed versions: Not specified
amd64-microcode
Fixed versions: Not specified
Complete source record
{
"id": "574d5a903673067665fbb8831bfaf55258b2fd10daac52450a70cb47881f620b",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-29952",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2025-29952",
"summary": "Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity",
"evidence": "osv:UBUNTU-CVE-2025-29952",
"products": [
{
"name": {
"value": "amd64-microcode",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.20230808.1.1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.20231019.1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.20231019.1ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "3.20231019.1ubuntu2.1",
"evidence": "/affected/0/versions"
},
{
"value": "3.20250311.1ubuntu0.24.04.1",
"evidence": "/affected/0/versions"
},
{
"value": "3.20251202.1ubuntu0.24.04.1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "amd64-microcode",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.20240820.1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "3.20250311.1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "3.20250708.1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "3.20251202.1ubuntu0.25.10.1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "amd64-microcode",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.20251202.1ubuntu2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "amd64-microcode",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.20250708.1ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "3.20250708.1ubuntu2",
"evidence": "/affected/3/versions"
},
{
"value": "3.20251202.1ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "3.20251202.1ubuntu2",
"evidence": "/affected/3/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2025-29952",
"aliases": [
"UBUNTU-CVE-2025-29952"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "amd64-microcode",
"purl": "pkg:deb/ubuntu/amd64-microcode?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.20230808.1.1ubuntu1",
"3.20231019.1ubuntu1",
"3.20231019.1ubuntu2",
"3.20231019.1ubuntu2.1",
"3.20250311.1ubuntu0.24.04.1",
"3.20251202.1ubuntu0.24.04.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-29952.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "amd64-microcode",
"binary_version": "3.20251202.1ubuntu0.24.04.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "amd64-microcode",
"purl": "pkg:deb/ubuntu/amd64-microcode?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.20240820.1ubuntu1",
"3.20250311.1ubuntu1",
"3.20250708.1ubuntu1",
"3.20251202.1ubuntu0.25.10.1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-29952.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "amd64-microcode",
"binary_version": "3.20251202.1ubuntu0.25.10.1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "amd64-microcode",
"purl": "pkg:deb/ubuntu/amd64-microcode?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"3.20251202.1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-29952.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "amd64-microcode",
"binary_version": "3.20251202.1ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "amd64-microcode",
"purl": "pkg:deb/ubuntu/amd64-microcode?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"3.20250708.1ubuntu1",
"3.20250708.1ubuntu2",
"3.20251202.1ubuntu1",
"3.20251202.1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-29952.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "amd64-microcode",
"binary_version": "3.20251202.1ubuntu2"
}
]
}
}
],
"modified": "2026-10-17T12:57:27.211740934Z",
"provider": "osv",
"upstream": [
"CVE-2025-29952"
],
"references": [
"https://ubuntu.com/security/CVE-2025-29952",
"https://www.cve.org/CVERecord?id=CVE-2025-29952",
"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3023.html"
]
},
"related_cves": [
{
"value": "CVE-2025-29952",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 357514,
"published_at": "2026-02-10T20:16:00+00:00"
}