Hardware integrity status
Hardware vulnerabilities can affect the security properties of confidential-computing technologies. This document lists recently published vulnerabilities and their effect on Privatemode.
In the current version, Privatemode builds on AMD SEV-SNP, Intel TDX, and the confidential-computing features of the Nvidia H100 and B200.
Edgeless Systems, the company behind Privatemode, works with hardware vendors to ensure the mitigation of any potential hardware vulnerabilities ahead of time.
Mitigation status
| Vulnerability | CVE | Affected hardware | Potential impact (unmitigated) | Privatemode mitigation status | Privatemode mitigation description |
|---|---|---|---|---|---|
| Heracles | - | AMD SEV-SNP | Reads from CVM memory for expert attacker with root-level access to host | Patched ✅ | Combination of (1) firmware patch from AMD and (2) kernel patch from Edgeless Systems |
| BadRAM | CVE-2024-21944 | AMD SEV-SNP | Access to CVM memory for expert attacker with hardware access and root-level access to host | Patched ✅ | Firmware patch from AMD |
| Battering RAM | - | AMD SEV-SNP | Access to CVM memory for expert attacker with hardware access and root-level access to host | Doesn't apply/mitigated ✅ | Attack only works for DDR4 RAM. Privatemode only uses 4th Gen AMD EPYC CPUs, which require DDR5. This is verified on the client via remote attestation. |
| RMPocalypse | CVE-2025-0033 | AMD SEV-SNP | Access to CVM memory for expert attacker with root-level access to host | Patched ✅ | Firmware patch from AMD |
| TEE.fail | - | AMD SEV-SNP, Intel TDX | Access to remote-attestation keys (Intel TDX) or access to CVM memory (AMD SEV-SNP) for expert attacker with specialized hardware and combined physical access and root-level access to host | Mitigated ✅ | Machine ID pinning |
| Google security review of TDX 1.5 | CVE-2025-30513, CVE-2025-22885, and others | Intel TDX | Access to CVM memory for expert attacker with root-level access to host | Patched ✅ | TDX module update |
| Fabricked | CVE-2025-54510 | AMD SEV-SNP | Access to CVM memory for expert attacker with UEFI and root-level access to host | Patched ✅ | Firmware patch from AMD |
| IOMMU Write Buffer Vulnerability | CVE-2023-20585 | AMD SEV-SNP | Access to CVM memory for expert attacker with root-level access to host | Patched ✅ | Firmware and kernel patch from AMD |
| BreakFAST | CVE-2025-61971, CVE-2025-61972 | AMD SEV-SNP | Expert attacker with root-level access to host can enable debug mode and forge attestation | Patched ✅ | Firmware patch from AMD |
| Staleus | CVE-2025-54509 | AMD SEV-SNP | Expert attacker with root-level access to host can enable debug mode | Patched ✅ | Firmware patch from AMD |
The presence of patches on the server side is verified on the client via remote attestation. "Patched" means that the underlying vulnerability is closed by a vendor patch. "Mitigated" means that the vulnerability can't be patched directly; Privatemode addresses the practical attack path through a software-based countermeasure.