CVE-2025-54507: Medium severity vulnerability
Published Nov 12, 2026
·Updated
Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in loss of guest integrity.
Event History
Nov 12, 2026
CVE Published
via MITRE·07:20 PM
Data Sourced
via MITRE·07:20 PM
DescriptionWeakness
Data Sourced
via NVD·08:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs administrative privileges. The issue affects AMD SEV firmware and could allow that attacker to create multiple RMP entries for the same guest physical address.
2
What is the security impact?
Successful exploitation can result in loss of guest integrity. The provided scoring indicates no direct impact to confidentiality or availability.