RMPocalypse: New Attack Breaks AMD Confidential Computing

Academic researchers from ETH Zurich have identified a vulnerability in the memory management of AMD processors that can undermine confidential computing integrity guarantees. Tracked as CVE-2025-0033 (CVSS 6.0), the issue arises from a race condition during Reverse Map Table (RMP) initialization in SEV-SNP where the ASP is responsible for RMP setup.

The attack, dubbed RMPocalypse, allows a malicious hypervisor to corrupt the RMP and manipulate its content, potentially breaking the confidentiality and integrity guarantees of SEV-SNP. The researchers demonstrated the exploit on Zen 3, Zen 4, and Zen 5 CPUs, showing how it can overwrite guest memory pages.

On Monday, according to AMD, its EPYC and EPYC Embedded processors are affected and patches were sent to OEMs for BIOS updates; Microsoft also said it is addressing the defect in Azure Confidential Computing’s AMD-based clusters, noting the risk is reduced in the wild due to guardrails.