{"id":"CVE-2025-29943","aliases":["BELL-CVE-2025-29943","DEBIAN-CVE-2025-29943","EUVD-2026-2929","GHSA-4vw8-pffj-q9x7","UBUNTU-CVE-2025-29943","openSUSE-SU-2026:11242-1"],"status":"published","title":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the...","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","severity":{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00226,"percentile":0.134,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-123"],"published":"2026-01-16T15:46:08Z","modified":"2026-09-01T20:04:52Z","exploits":[{"source":"pocgithub","id":"fevar54/POC_CVE-2025-29943_Write-what-where-Condition","title":"fevar54/POC_CVE-2025-29943_Write-what-where-Condition","date":"2026-01-20","url":"https://github.com/fevar54/POC_CVE-2025-29943_Write-what-where-Condition"}],"fixes":[{"ecosystem":"Alpaquita:stream","package":"linux-firmware","fixed_in":["20251125-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"amd64-microcode","fixed_in":["3.20251202.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"amd64-microcode","fixed_in":["3.20251202.1ubuntu0.24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"amd64-microcode","fixed_in":["3.20251202.1ubuntu0.25.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"amd64-microcode","fixed_in":["3.20251202.1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpaquita:23","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20221109-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20250509-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"linux-firmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"20230625-r0"},{"fixed":"20251125-r1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20120117-1","1.20120117-1","1.20120117-2","1.20120117-2~bpo60+1","1.20120910-1","1.20120910-1~bpo60+1","1.20120910-2","1.20120910-2~bpo60+1","1.20120910-3","1.20141028.1","1.20160316.1","2.20120910-1","2.20120910-1~bpo70+1","2.20131007.1","2.20131007.1+really20130710.1","2.20141028.1","2.20141028.1~bpo70+1","2.20160316.1","2.20160316.1~bpo70+1","2.20160316.1~deb8u1","3.20160316.1","3.20160316.2","3.20160316.3","3.20171205.1","3.20171205.2","3.20180515.1","3.20180524.1","3.20180524.1~bpo9+1","3.20181128.1","3.20181128.1~bpo9+1","3.20181128.1~deb8u1","3.20181128.1~deb9u1","3.20181128.1~deb9u2","3.20191021.1","3.20191218.1","3.20220411.1","3.20220411.2","3.20230414.1","3.20230719.1","3.20230719.1~deb10u1","3.20230719.1~deb11u1","3.20230719.1~deb12u1","3.20230808.1","3.20230808.1.1","3.20230808.1.1~deb11u1","3.20230808.1.1~deb12u1","3.20230823.1","3.20231019.1","3.20240116.2","3.20240116.2+nmu1","3.20240710.1","3.20240710.2","3.20240710.2~deb11u1","3.20240710.2~deb12u1","3.20240820.1","3.20240820.1~deb11u1","3.20240820.1~deb12u1","3.20250311.1","3.20250311.1~deb11u1","3.20250311.1~deb12u1","3.20251202.1"]},{"source":"osv","ecosystem":"Debian:13","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.20120117-1","1.20120117-1","1.20120117-2","1.20120117-2~bpo60+1","1.20120910-1","1.20120910-1~bpo60+1","1.20120910-2","1.20120910-2~bpo60+1","1.20120910-3","1.20141028.1","1.20160316.1","2.20120910-1","2.20120910-1~bpo70+1","2.20131007.1","2.20131007.1+really20130710.1","2.20141028.1","2.20141028.1~bpo70+1","2.20160316.1","2.20160316.1~bpo70+1","2.20160316.1~deb8u1","3.20160316.1","3.20160316.2","3.20160316.3","3.20171205.1","3.20171205.2","3.20180515.1","3.20180524.1","3.20180524.1~bpo9+1","3.20181128.1","3.20181128.1~bpo9+1","3.20181128.1~deb8u1","3.20181128.1~deb9u1","3.20181128.1~deb9u2","3.20191021.1","3.20191218.1","3.20220411.1","3.20220411.2","3.20230414.1","3.20230719.1","3.20230719.1~deb10u1","3.20230719.1~deb11u1","3.20230719.1~deb12u1","3.20230808.1","3.20230808.1.1","3.20230808.1.1~deb11u1","3.20230808.1.1~deb12u1","3.20230823.1","3.20231019.1","3.20240116.2","3.20240116.2+nmu1","3.20240710.1","3.20240710.2","3.20240710.2~deb11u1","3.20240710.2~deb12u1","3.20240820.1","3.20240820.1~deb11u1","3.20240820.1~deb12u1","3.20250311.1","3.20250311.1~deb11u1","3.20250311.1~deb12u1","3.20251202.1"]},{"source":"osv","ecosystem":"Debian:14","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20251202.1"}]}],"versions":["0.20120117-1","1.20120117-1","1.20120117-2","1.20120117-2~bpo60+1","1.20120910-1","1.20120910-1~bpo60+1","1.20120910-2","1.20120910-2~bpo60+1","1.20120910-3","1.20141028.1","1.20160316.1","2.20120910-1","2.20120910-1~bpo70+1","2.20131007.1","2.20131007.1+really20130710.1","2.20141028.1","2.20141028.1~bpo70+1","2.20160316.1","2.20160316.1~bpo70+1","2.20160316.1~deb8u1","3.20160316.1","3.20160316.2","3.20160316.3","3.20171205.1","3.20171205.2","3.20180515.1","3.20180524.1","3.20180524.1~bpo9+1","3.20181128.1","3.20181128.1~bpo9+1","3.20181128.1~deb8u1","3.20181128.1~deb9u1","3.20181128.1~deb9u2","3.20191021.1","3.20191218.1","3.20220411.1","3.20220411.2","3.20230414.1","3.20230719.1","3.20230719.1~deb10u1","3.20230719.1~deb11u1","3.20230719.1~deb12u1","3.20230808.1","3.20230808.1.1","3.20230808.1.1~deb11u1","3.20230808.1.1~deb12u1","3.20230823.1","3.20231019.1","3.20240116.2","3.20240116.2+nmu1","3.20240710.1","3.20240710.2","3.20240710.2~deb11u1","3.20240710.2~deb12u1","3.20240820.1","3.20240820.1~deb11u1","3.20240820.1~deb12u1","3.20250311.1","3.20250311.1~deb11u1","3.20250311.1~deb12u1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20120910-3","2.20131007.1+really20130710.1","3.20180524.1~ubuntu0.14.04.1","3.20180524.1~ubuntu0.14.04.2+really20130710.1","3.20180524.1~ubuntu0.14.04.2+really20130710.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20141028.1","2.20160316.1","3.20180524.1~ubuntu0.16.04.1","3.20180524.1~ubuntu0.16.04.2","3.20191021.1ubuntu0.16.04.1","3.20191021.1+really3.20180524.1~ubuntu0.16.04.2","3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm1","3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm2","3.20191021.1+really3.20180524.1~ubuntu0.16.04.2+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.20160316.3","3.20171205.1","3.20180524.1~ubuntu0.18.04.1","3.20180524.1~ubuntu0.18.04.2","3.20191021.1ubuntu0.18.04.2","3.20191021.1+really3.20181128.1~ubuntu0.18.04.1","3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm1","3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm2","3.20191021.1+really3.20181128.1~ubuntu0.18.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.20181128.1ubuntu2","3.20191021.1ubuntu1","3.20191218.1ubuntu1","3.20191218.1ubuntu1.1","3.20191218.1ubuntu1.2","3.20191218.1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.20191218.1ubuntu2","3.20191218.1ubuntu2.1","3.20191218.1ubuntu2.2","3.20191218.1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20251202.1ubuntu0.24.04.1"}]}],"versions":["3.20230808.1.1ubuntu1","3.20231019.1ubuntu1","3.20231019.1ubuntu2","3.20231019.1ubuntu2.1","3.20250311.1ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20251202.1ubuntu0.25.10.1"}]}],"versions":["3.20240820.1ubuntu1","3.20250311.1ubuntu1","3.20250708.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"amd64-microcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20251202.1ubuntu1"}]}],"versions":["3.20250708.1ubuntu1","3.20250708.1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"spectre-meltdown-checker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"26.36.0602723-1.1"}]}],"bundled":28}],"products":[{"vendor":"amd","product":"amd epyc™ 8004 series processors"},{"vendor":"amd","product":"amd epyc™ 9004 series processors"},{"vendor":"amd","product":"amd epyc™ 9005 series processors"},{"vendor":"amd","product":"amd epyc™ embedded 7003 series processors"},{"vendor":"amd","product":"amd epyc™ embedded 9005 series processors"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3027.html","tags":["report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29943"},{"url":"https://github.com/advisories/GHSA-4vw8-pffj-q9x7"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-29943","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-29943","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-29943","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-29943","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-21123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-20588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-23583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-28956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45332","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-7881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-20623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54505","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-29943","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T15:46:08.641Z","modified":"2026-01-16T15:54:30.327Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","level":"medium","assessor":"cna"}],"cwes":["CWE-123"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2026-2929","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T15:46:08Z","modified":"2026-01-16T15:54:30Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","level":"medium"}],"updated_at":"2026-11-02T19:48:50.882066Z"}],"ghsa":[{"id":"GHSA-4vw8-pffj-q9x7","title":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the...","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T18:31:33Z","modified":"2026-01-16T18:31:44Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"cwes":["CWE-123"],"updated_at":"2026-11-02T15:05:38.741943Z"}],"nvd":[{"id":"CVE-2025-29943","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T16:15:53.403Z","modified":"2026-06-17T09:05:56.157Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"}],"cwes":["CWE-123"],"updated_at":"2026-11-02T14:11:57.915063Z"}],"osv":[{"id":"DEBIAN-CVE-2025-29943","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T16:15:53.403Z","modified":"2026-09-01T20:04:52.553526777Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"UBUNTU-CVE-2025-29943","description":"Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest.","status":"published","published":"2026-01-16T16:15:00Z","modified":"2026-06-25T23:45:12.46550542Z","cvss":[{"version":"4.0","score":4.6,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"BELL-CVE-2025-29943","status":"published","published":"2026-01-20T06:13:02.509244Z","modified":"2026-01-26T09:39:06.511515Z","updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"openSUSE-SU-2026:11242-1","title":"spectre-meltdown-checker-26.36.0602723-1.1 on GA media","description":"These are all security issues fixed in the spectre-meltdown-checker-26.36.0602723-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-07-10T10:00:10.593286162Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}