CVE-2025-29946 MEDIUM

CVE-2025-29946

Weakness CWE-1301
Published February 10, 2026
Last update February 10, 2026
View on NVD All CVEs

CVSS base score

4.5/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

What the vulnerability does

01Description

Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory.

Key dates

02Disclosure timeline

February 10, 2026 CVE published
February 10, 2026 Record updated