Quick Summary
A new hardware vulnerability, StackWarp, has been disclosed by researchers from the CISPA Helmholtz Center for Information Security, impacting AMD processors from Zen 1 to Zen 5. This flaw allows attackers with privileged access to run malicious code within confidential virtual machines (CVMs), undermining AMD’s Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). AMD has tracked this issue as CVE-2025-29943, with a CVSS v4 score of 4.6, indicating a medium severity level that could lead to privilege escalation and remote code execution within affected systems.
The Securityish Brief
The StackWarp vulnerability, discovered by researchers Ruiyi Zhang and colleagues, allows malicious actors to manipulate the stack pointer of guest VMs in AMD’s SEV-SNP environment. This flaw affects AMD processors across multiple product lines, including the EPYC 7003, 8004, 9004, and 9005 Series Processors, as well as their embedded counterparts. The vulnerability can be exploited through a previously undocumented control bit on the hypervisor side, enabling attackers to redirect program flow and manipulate sensitive data.
Specifically, the StackWarp attack can recover an RSA-2048 private key from a single faulty signature, bypassing OpenSSH password authentication and sudo prompts. This highlights the potential for significant security breaches in AMD-powered cloud environments, where confidential VMs are expected to be secure from unauthorized access.
AMD has released microcode updates to address this vulnerability in July and October 2025, with further patches for specific EPYC Embedded processors scheduled for April 2026. The findings build on previous research detailing another vulnerability, CacheWarp (CVE-2023-20592), which also targeted AMD SEV-SNP systems.
Implications for Security
For organizations utilizing AMD SEV-SNP hosts, it is crucial to assess the risk posed by hyperthreading, especially for VMs with high integrity requirements. Disabling hyperthreading temporarily may be necessary to mitigate potential exploits until comprehensive patches are applied. Regularly updating microcode and firmware from hardware vendors is essential to maintain security against emerging threats.
This situation underscores the importance of monitoring microarchitectural vulnerabilities that can undermine system-level security. As attacks become more sophisticated, organizations must remain vigilant in their security practices and ensure that their systems are equipped with the latest protections.
Key Takeaways
- Check if hyperthreading is enabled on your AMD SEV-SNP systems and consider disabling it for high-integrity VMs.
- Install all available microcode and firmware updates from AMD to protect against the StackWarp vulnerability.
- Regularly review and update security configurations for your virtual machines to minimize risks.
- Monitor for any announcements from AMD regarding further patches or vulnerabilities related to SEV-SNP.
- Educate your team about the implications of hardware vulnerabilities and the importance of maintaining system security.
Key Terms & Concepts
- StackWarp: In this article, StackWarp refers to a hardware vulnerability affecting AMD processors that allows unauthorized code execution in confidential virtual machines.
- SEV-SNP: SEV-SNP stands for Secure Encrypted Virtualization with Secure Nested Paging, a technology designed by AMD to protect virtual machines.
- CVE-2025-29943: CVE-2025-29943 is the identifier assigned to the StackWarp vulnerability affecting AMD processors.
- RSA-2048: RSA-2048 is a widely used encryption standard that relies on the difficulty of factoring large numbers for secure data transmission.
Read the original article here: https://thehackernews.com/2026/01/new-stackwarp-hardware-flaw-breaks-amd.html
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
