Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-48517

Опубликовано: 10 фев. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий

Описание

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.

РелизСтатусПримечание
devel

needed

esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
jammy

not-affected

code not present
noble

needed

questing

needed

resolute

needed

Показывать по

EPSS

Процентиль: 3%
0.00136
Низкий

Связанные уязвимости

nvd
5 месяцев назад

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.

debian
5 месяцев назад

Insufficient Granularity of Access Control in SEV firmware could allow ...

github
5 месяцев назад

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality.

CVSS3: 3.2
fstec
5 месяцев назад

Уязвимость технологии Secure Encrypted Virtualization (SEV) микропрограммного обеспечения процессоров AMD, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 3%
0.00136
Низкий