{"id":"CVE-2025-54501","kind":"vulnerability","aliases":["CVE-2025-54501"],"related":[],"title":"AMD SEV-SNP: debug interface lets privileged attacker bypass guest memory protections","description":"Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access controls potentially resulting in a loss of SEV-SNP guest memory integrity.","summary":"An internal debug interface has improper access control, so a highly privileged attacker can bypass memory access controls. The result is loss of integrity for SEV-SNP confidential guest memory.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","infrastructure","sev-snp"],"not_affected_if":["no-sev-snp"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T19:16:45+00:00","first_seen_at":"2026-11-12T19:40:13+00:00","triaged_at":"2026-11-12T19:40:56+00:00","updated_at":"2026-11-12T19:40:56+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-12T19:40:56Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV-SNP: debug interface lets privileged attacker bypass guest memory protections","impact":"medium","summary":"An internal debug interface has improper access control, so a highly privileged attacker can bypass memory access controls. The result is loss of integrity for SEV-SNP confidential guest memory.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev-snp","confidential-computing"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker with high privilege alters confidential guest memory integrity","analyst_note":"Find the AMD security bulletin naming affected SEV-SNP firmware versions and the fixed versions at the NVD entry's linked advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-sev-snp"],"who_is_affected":"Teams running confidential VMs on AMD SEV-SNP hardware are the ones exposed; the sources do not name the affected firmware or products or say which configurations are vulnerable. Systems without SEV-SNP guests are unlikely to be affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00068,"input_tokens":4506,"output_tokens":458,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':15A,18A '-54501':16A,19A 'access':34B,44B,60C,76C 'allow':68C 'amd':1A,20B 'attack':9A,40B,72C 'bypass':10A,42B,74C 'comput':23B 'confidenti':22B,56B 'confidential-comput':21B 'control':35B,45B,61C,77C 'could':67C 'cve':14A,17A 'debug':5A,30B,65C 'guest':11A,57B,87C 'high':38B,70C 'improp':33B,59C 'infrastructur':24B 'integr':51B,89C 'interfac':6A,31B,66C 'intern':29B,64C 'let':7A 'loss':49B,82C 'memori':12A,43B,58B,75C,88C 'potenti':78C 'privileg':8A,39B,71C 'protect':13A 'result':47B,79C 'sev':3A,26B,54B,85C 'sev-snp':2A,25B,53B,84C 'snp':4A,27B,55B,86C","nicknames":[],"mitigations":[],"who_affected":"Teams running confidential VMs on AMD SEV-SNP hardware are the ones exposed; the sources do not name the affected firmware or products or say which configurations are vulnerable. Systems without SEV-SNP guests are unlikely to be affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","infrastructure","medium","sevsnp"],"campaign_type":null,"search_a":"'-2025':15A,18A '-54501':16A,19A 'amd':1A 'attack':9A 'bypass':10A 'cve':14A,17A 'debug':5A 'guest':11A 'interfac':6A 'let':7A 'memori':12A 'privileg':8A 'protect':13A 'sev':3A 'sev-snp':2A 'snp':4A","search_b":"'access':34B,44B 'amd':20B 'attack':40B 'bypass':42B 'comput':23B 'confidenti':22B,56B 'confidential-comput':21B 'control':35B,45B 'debug':30B 'guest':57B 'high':38B 'improp':33B 'infrastructur':24B 'integr':51B 'interfac':31B 'intern':29B 'loss':49B 'memori':43B,58B 'privileg':39B 'result':47B 'sev':26B,54B 'sev-snp':25B,53B 'snp':27B,55B","search_c":"'access':60C,76C 'allow':68C 'attack':72C 'bypass':74C 'control':61C,77C 'could':67C 'debug':65C 'guest':87C 'high':70C 'improp':59C 'integr':89C 'interfac':66C 'intern':64C 'loss':82C 'memori':75C,88C 'potenti':78C 'privileg':71C 'result':79C 'sev':85C 'sev-snp':84C 'snp':86C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T19:16:45+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-54501","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54501","severity":null,"published_at":"2026-11-12T19:16:45+00:00","modified_at":"2026-11-12T19:24:37+00:00","first_seen_at":"2026-11-12T19:40:13+00:00","fetched_at":"2026-11-12T19:40:13+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}