AMD CPU users beware - this security flaw could spill all your secrets

• CISPA researchers uncover AMD CPU flaw “StackWarp” breaking confidential VM protections
• Vulnerability enables RCE, privilege escalation, and theft of private keys in Zen processors
• AMD released patch (CVE-2025-29943), rated low severity, requiring host-level access to exploit

A newly discovered vulnerability in AMD chips allows malicious actors to perform remote code execution (RCE) and privilege escalation in virtual machines.

Cybersecurity researchers from the CISPA Helmholtz Center for Information Security in Germany detailed a vulnerability they named StackWarp, a hardware vulnerability in AMD CPUs that breaks the protections of confidential virtual machines, by manipulating how the processor tracks the stack, and letting a malicious insider or hypervisor change program flow or read sensitive data inside a protected VM.

As a result, malicious actors can recover private keys, and run code with high privileges, even though the VM’s memory was supposed to be secure.