CVE-2025-29943
MEDIUMAMD EPYC 9004/9005/8004, Embedded 7003/9005 - Write-What-Where via CPU Pipeline Config
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-29943. PoCs published by fevar54.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2025-29943, a write-what-where condition in AMD processors (Zen 1-5) that allows a malicious hypervisor to manipulate CPU pipeline configuration and corrupt stack pointers in SEV-SNP VMs, leading to privilege escalation and arbitrary code execution.
Description
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.
Exploits (1)
This repository contains a proof-of-concept exploit for CVE-2025-29943, a write-what-where condition in AMD processors (Zen 1-5) that allows a malicious hypervisor to manipulate CPU pipeline configuration and corrupt stack pointers in SEV-SNP VMs, leading to privilege escalation and arbitrary code execution.
References (1)
Scores
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X