AMD EPYC SEV firmware: Operation on released resource allows guest device swap
Summary
A flaw in the AMD Secure Encrypted Virtualization (SEV) firmware on EPYC 8005, 9005 and EPYC Embedded 9005 processors allows an attacker with administrative privileges to swap out a guest device without the guest's knowledge. This can result in loss of confidentiality and integrity of the guest. The attack requires local access and administrator control of the hypervisor or host, so it is mainly relevant for EPYC virtualization and cloud hosting environments.
Affected
- AMD EPYC 9005 Series Processors (default: affected, TurinPI_1.0.0.B listed as unaffected)
- AMD EPYC 8005 Series Processors (default: affected, TurinPI_1.0.0.B listed as unaffected)
- AMD EPYC Embedded 9005 Series Processors (default: affected, EmbeddedTurinPI_SP5_1005 listed as unaffected)
- Server platforms based on these processors, e.g. Supermicro H12, H13 and H14 products (per Supermicro)
Fixed in
Unknown. Check the per-platform table in AMD-SB-3038.
Workaround
- No vendor-stated workaround known. The fix is firmware-based, so patching is the practical mitigation.
Exploitation
- No known exploitation. The CVE is not listed in CISA's KEV catalog.
- No public proof of concept found.
Our recommendation
- Inventory EPYC 8005/9005 hosts, including Supermicro H13/H14 boards.
- Request the BIOS/firmware status from your hardware vendor or hosting provider.
- Apply the fixes from AMD-SB-3038 in the next maintenance window once available for your platform.
- Restrict administrative access to hypervisors and BMC/iDRAC/IPMI interfaces, use MFA and separate admin accounts, and log firmware and BIOS changes.
- Check the advisories of Dell, HPE and Lenovo for your hardware.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AMD-SB-3038: AMD Secure Encrypted Virtualization (SEV) Vulnerabilities www.amd.com
- AMD Product Security www.amd.com
- AMD SEV developer resources www.amd.com
- Supermicro Security Center www.supermicro.com
- Strix CVE listing CVE-2026-0435 www.strix.ai
- TheHackerWire CVE-2026-0435 www.thehackerwire.com
- OffSeq Radar CVE-2026-0435 radar.offseq.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 14:43.
Original description (NVD)
Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.