Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-48514

Опубликовано: 10 фев. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

РелизСтатусПримечание
devel

released

3.20251202.1ubuntu1
esm-infra-legacy/trusty

ignored

no real-world users
esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

needs-triage

noble

needs-triage

questing

needs-triage

resolute

released

3.20251202.1ubuntu1

Показывать по

EPSS

Процентиль: 3%
0.00135
Низкий

Связанные уязвимости

nvd
4 месяца назад

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

debian
4 месяца назад

Insufficient Granularity of Access Control in SEV firmware can allow a ...

github
4 месяца назад

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

CVSS3: 3.2
fstec
5 месяцев назад

Уязвимость технологии Secure Encrypted Virtualization (SEV) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 3%
0.00135
Низкий