Improper access control in AMD products - CVE-2025-29943

Vulnerability identifier: #VU121621

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N]

CVE-ID: CVE-2025-29943

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper access control within AMD CPUs. A local user with administrative privileges can modify configuration of the CPU pipeline and corrupt the stack pointer inside an SEV-SNP guest.

AMD EPYC 7003
AMD EPYC 8004
AMD EPYC 9004
AMD EPYC 9005
HPE ProLiant Compute DL325 Gen12
HPE ProLiant Compute DL345 Gen12
HPE ProLiant DL145 Gen11
HPE ProLiant DL325 Gen11 Server
HPE ProLiant DL345 Gen11 Server
HPE ProLiant DL365 Gen11 Server
HPE ProLiant DL385 Gen11 Server
HPE ProLiant DL325 Gen10 Plus v2 server
HPE ProLiant DL345 Gen10 Plus server
HPE ProLiant DL365 Gen10 Plus server
HPE ProLiant DL385 Gen10 Plus v2 server
HPE ProLiant XL225n Gen10 Plus 1U Node
HPE ProLiant XL645d Gen10 Plus Server
HPE ProLiant XL675d Gen10 Plus Server

Install updates from vendor's website.

AMD EPYC 7003 - update to 1.0.0.H
AMD EPYC 8004 - update to 1.0.0.H
AMD EPYC 9004 - update to 1.0.0.H
AMD EPYC 9005 - update to 1.0.0.6
HPE ProLiant Compute DL325 Gen12 - update to 1.20_07-11-2025
HPE ProLiant Compute DL345 Gen12 - update to 1.20_07-11-2025
HPE ProLiant DL145 Gen11 - update to 1.72_10-03-2025
HPE ProLiant DL325 Gen11 Server - update to 2.82_10-03-2025
HPE ProLiant DL345 Gen11 Server - update to 2.82_10-03-2025
HPE ProLiant DL365 Gen11 Server - update to 2.82_10-03-2025
HPE ProLiant DL385 Gen11 Server - update to 2.82_10-03-2025
HPE ProLiant DL325 Gen10 Plus v2 server - update to 3.90_10-03-2025
HPE ProLiant DL345 Gen10 Plus server - update to 3.90_10-03-2025
HPE ProLiant DL365 Gen10 Plus server - update to 3.90_10-03-2025
HPE ProLiant DL385 Gen10 Plus v2 server - update to 3.90_10-03-2025
HPE ProLiant XL225n Gen10 Plus 1U Node - update to 3.90_10-03-2025
HPE ProLiant XL645d Gen10 Plus Server - update to 3.90_10-03-2025
HPE ProLiant XL675d Gen10 Plus Server - update to 3.90_10-03-2025

• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3027.html

• SEV-SNP guest stack pointer corruption in AMD processors
• HPE ProLiant DL/XL servers update for AMD EPYC