SARA / Free Tools / CVE / CVE-2025-0031

CVE-2025-0031 — A use after free in the SEV firmware could allow a malicous hypervisor to activa

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.

CVSS
4.6 MEDIUM
EPSS
2.00% (top 95.40%)
CWE
CWE-416
Published
2026-02-10T19:14:58.027Z
Last modified
2026-02-11T14:51:07.017Z
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

01What is this vulnerability?

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity.

02Affected products

VendorProductVersions
AMDAMD EPYC™ 9004 Series ProcessorsGenoaPI 1.0.0.G
AMDAMD EPYC™ 7003 Series ProcessorsMilanPI 1.0.0.H
AMDAMD EPYC™ 9005 Series ProcessorsTurinPI 1.0.0.5
AMDAMD EPYC™ 8004 Series ProcessorsGenoaPI 1.0.0.G
AMDAMD EPYC™ Embedded 7003 Series ProcessorsEmbMilanPI-SP3 v9 1.0.0.C
AMDAMD EPYC™ Embedded 9003 Series ProcessorsEmbGenoaPI-SP5 1.0.0.B
AMDAMD EPYC™ Embedded 9005 Series ProcessorsEmbTurinPI-SP5_1.0.0.1
AMDAMD EPYC™ Embedded 9004 Series ProcessorsEmbGenoaPI-SP5 1.0.0.B
AMDAMD EPYC™ Embedded 8004 Series ProcessorsEmbGenoaPI-SP5 1.0.0.B

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →