CVE Vulnerabilities

CVE-2025-29943

Write-what-where Condition

Published: Jan 16, 2026 | Modified: Jan 26, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
3.2 LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.

Weakness

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

Affected Software

NameVendorStart VersionEnd Version
Amd64-microcodeUbuntudevel*
Amd64-microcodeUbuntuesm-infra-legacy/trusty*
Amd64-microcodeUbuntuesm-infra/bionic*
Amd64-microcodeUbuntuesm-infra/focal*
Amd64-microcodeUbuntuesm-infra/xenial*
Amd64-microcodeUbuntujammy*
Amd64-microcodeUbuntunoble*
Amd64-microcodeUbuntuquesting*
Amd64-microcodeUbuntuupstream*

Potential Mitigations

References