CVE-2025-54508: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using AMD Secure Encrypted Virtualization firmware are in scope. Exploitation requires a privileged attacker, so unprivileged users and remote unauthenticated attackers are not identified as direct exploiters by the available data.

What does an attacker need to do to exploit it?

The attacker must be able to trigger concurrent modifications to Reverse Map Table entries. The vulnerability is caused by insufficient synchronization during those concurrent modifications.

What is the potential impact?

Successful exploitation could result in loss of data integrity. The provided severity vector does not indicate an impact on confidentiality or availability.

CVE-2025-54508: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to do to exploit it?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What does an attacker need to do to exploit it?

What is the potential impact?