{"id":"CVE-2025-54506","kind":"vulnerability","aliases":["CVE-2025-54506"],"related":[],"title":"AMD SEV firmware: race condition lets admins bypass scatter list checks","description":"A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.","summary":"A time-of-check to time-of-use race in AMD SEV firmware lets an attacker with administrative privileges bypass security checks on scatter lists. The result can be loss of guest integrity in confidential virtual machines.","severity":"medium","cvss":4.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev"],"not_affected_if":["no-amd-sev","non-admin-only"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","triaged_at":"2026-11-10T22:31:06+00:00","updated_at":"2026-11-10T22:31:06+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T22:31:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: race condition lets admins bypass scatter list checks","impact":"medium","summary":"A time-of-check to time-of-use race in AMD SEV firmware lets an attacker with administrative privileges bypass security checks on scatter lists. The result can be loss of guest integrity in confidential virtual machines.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","confidential-computing","hypervisor"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"guest VM memory integrity lost on AMD SEV hosts","analyst_note":"Find the affected AMD SEV firmware versions and the AMD security bulletin fix from the NVD entry or AMD's advisory, since the sources list no products or fixes.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-amd-sev","non-admin-only"],"who_is_affected":"Only hosts running AMD SEV confidential virtual machines are exposed, and the attacker must already hold administrative privileges on the host. Teams that do not run SEV-enabled AMD hardware can skip it. The sources do not name affected firmware versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000698,"input_tokens":4565,"output_tokens":483,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':13A,16A '-54506':14A,17A 'admin':7A 'administr':44B,91C 'allow':87C 'amd':1A,18B,37B,79C 'attack':42B,89C 'bypass':8A,46B,94C 'check':11A,29B,48B,68C,96C 'comput':21B 'condit':5A,76C 'confidenti':20B,61B 'confidential-comput':19B 'could':86C 'cve':12A,15A 'encrypt':82C 'firmwar':3A,39B,85C 'guest':58B,105C 'hypervisor':22B 'infrastructur':23B 'integr':59B,106C 'let':6A,40B 'list':10A,51B,99C 'loss':56B,103C 'machin':63B 'potenti':100C 'privileg':45B,92C 'race':4A,35B,75C 'result':53B,101C 'scatter':9A,50B,98C 'secur':47B,81C,95C 'sev':2A,24B,38B,80C,84C 'time':27B,32B,66C,71C 'time-of-check':26B,65C 'time-of-us':31B,70C 'toctou':74C 'use':34B,73C 'virtual':62B,83C","nicknames":[],"mitigations":[],"who_affected":"Only hosts running AMD SEV confidential virtual machines are exposed, and the attacker must already hold administrative privileges on the host. Teams that do not run SEV-enabled AMD hardware can skip it. The sources do not name affected firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev"],"campaign_type":null,"search_a":"'-2025':13A,16A '-54506':14A,17A 'admin':7A 'amd':1A 'bypass':8A 'check':11A 'condit':5A 'cve':12A,15A 'firmwar':3A 'let':6A 'list':10A 'race':4A 'scatter':9A 'sev':2A","search_b":"'administr':44B 'amd':18B,37B 'attack':42B 'bypass':46B 'check':29B,48B 'comput':21B 'confidenti':20B,61B 'confidential-comput':19B 'firmwar':39B 'guest':58B 'hypervisor':22B 'infrastructur':23B 'integr':59B 'let':40B 'list':51B 'loss':56B 'machin':63B 'privileg':45B 'race':35B 'result':53B 'scatter':50B 'secur':47B 'sev':24B,38B 'time':27B,32B 'time-of-check':26B 'time-of-us':31B 'use':34B 'virtual':62B","search_c":"'administr':91C 'allow':87C 'amd':79C 'attack':89C 'bypass':94C 'check':68C,96C 'condit':76C 'could':86C 'encrypt':82C 'firmwar':85C 'guest':105C 'integr':106C 'list':99C 'loss':103C 'potenti':100C 'privileg':92C 'race':75C 'result':101C 'scatter':98C 'secur':81C,95C 'sev':80C,84C 'time':66C,71C 'time-of-check':65C 'time-of-us':70C 'toctou':74C 'use':73C 'virtual':83C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T22:17:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-54506","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54506","severity":null,"published_at":"2026-11-10T22:17:46+00:00","modified_at":"2026-11-10T22:17:46+00:00","first_seen_at":"2026-11-10T22:27:22+00:00","fetched_at":"2026-11-10T22:27:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}