CVE-2025-61971

Public on 2026-05-13
Modified on 2026-06-22
Description
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
6.0
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core linux-firmware Not Affected
Amazon Linux 2023 linux-firmware Not Affected
Amazon Linux 2 - Core microcode_ctl Not Affected
Amazon Linux 2023 microcode_ctl Not Affected

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2025-61971 Mitre: CVE-2025-61971