AMD SEV firmware: Improper enforcement of behavioral workflow in attestation
Summary
AMD Secure Encrypted Virtualization (SEV) firmware on EPYC server and EPYC Embedded processors can be abused to launch a guest whose attestation report contains an ID key digest that does not match the guest's measurement. A malicious hypervisor or host with high privileges can exploit this to undermine guest integrity. The attack requires local access and high privileges, so risk is mainly relevant where the host operator is not trusted or where confidential VMs depend on attestation.
Affected
- EPYC 9004, 7003, 9005, 8004 and 8005 Series Processors (per CNA data, no version ranges)
- EPYC Embedded 7003, 8004, 9005 and 9004 Series Processors (Genoa and Bergamo; scope unresolved, to be verified against AMD-SB-3038)
- Affected firmware versions: Unknown.
Fixed in
Unknown. Fixed firmware versions are not confirmed; check AMD-SB-3038 and the OEM BIOS advisories.
Workaround
Unknown. No workaround found in the sources. Firmware/BIOS updates from AMD and the OEM are the expected remedy.
Exploitation
- No known exploitation at the time of research (11 Nov 2026), preliminary.
- Not listed in CISA KEV according to OffSeq.
- No public proof-of-concept code found.
Our recommendation
- Include the BIOS/firmware update for affected EPYC hosts in the normal maintenance cycle once AMD-SB-3038 and the OEM advisory confirm the fixed versions.
- Escalate priority if you run confidential VMs on hosts you do not control, such as hosting, colocation or cloud.
- Verify your EPYC models and BIOS versions against the vendor bulletins.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- AMD Security Bulletin AMD-SB-3038 www.amd.com
- AMD Product Security www.amd.com
- Strix CVE record CVE-2026-28248 www.strix.ai
- OffSeq threat radar entry radar.offseq.com
- Supermicro Security Center www.supermicro.com
- Edgeless Systems: AMD SEV-SNP attestation details docs.edgeless.systems
- AMD Security Bulletin AMD-SB-3019 www.amd.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 14:57.
Original description (NVD)
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an ID key digest for an ID block that doesn't match the guest's measurement resulting in loss of integrity.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.