AMD RMPocalypse Flaw Breaks SEV-SNP Security

Researchers have discovered a critical vulnerability, dubbed RMPocalypse (CVE-2025-0033), affecting multiple AMD EPYC processors. The flaw exploits a race condition during the initialization of the Reverse Map Paging (RMP) table, a core component of the Secure Encrypted Virtualization (SEV-SNP) technology. This allows a malicious hypervisor to corrupt the RMP, completely bypassing the confidentiality and integrity guarantees of SEV-SNP. Successful exploitation enables attackers to tamper with isolated virtual machines, forge security attestations, and exfiltrate all secrets with a 100% success rate. In response, the chipmaker has released firmware updates to mitigate the issue and protect confidential computing environments.