CVE-2025-54504

CVSS 5.9 (medium) · published 2026-11-10

Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.

Weakness: CWE-1220

Source: NVD CVE-2025-54504

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.