CVE-2025-48514

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.

Granularidad Insuficiente del Control de Acceso en el firmware de SEV puede permitir a un atacante privilegiado crear un invitado SEV-ES para atacar a un invitado SNP, lo que podría resultar en una pérdida de confidencialidad.