Resource Operation Vulnerability in AMD Secure Encrypted Virtualization Firmware
CVE-2026-0435

6MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 9005 Series Processors
Amd Epyc™ 8005 Series Processors
Amd Epyc™ Embedded 9005 Series Processors
Vendor
CVE Published:
10 November 2026

What is CVE-2026-0435?

A vulnerability exists in the AMD Secure Encrypted Virtualization (SEV) firmware, where an operation can be performed on a resource after it has been expired or released. This flaw may enable an attacker possessing administrative privileges to manipulate guest devices without the knowledge of the guest, posing significant risks to the confidentiality and integrity of sensitive data.

Affected Version(s)

AMD EPYC™ 8005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ Embedded 9005 Series Processors EmbeddedTurinPI_SP5_1005

References

https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.