{"id":"CVE-2025-54507","kind":"vulnerability","aliases":["CVE-2025-54507"],"related":[],"title":"AMD SEV firmware: weak input checks let admins corrupt guest memory integrity","description":"Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in loss of guest integrity.","summary":"AMD SEV firmware does not properly check input consistency, so a user with administrative privileges can create multiple RMP entries for the same guest physical address. This can result in loss of guest integrity for virtual machines protected by SEV.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd-epyc","amd-sev","confidential-computing","hypervisor","infrastructure"],"not_affected_if":["no-sev-hosts","non-amd-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-12T20:18:14+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","triaged_at":"2026-11-12T20:42:22+00:00","updated_at":"2026-11-12T20:42:22+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-11-12T20:42:22Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: weak input checks let admins corrupt guest memory integrity","impact":"medium","summary":"AMD SEV firmware does not properly check input consistency, so a user with administrative privileges can create multiple RMP entries for the same guest physical address. This can result in loss of guest integrity for virtual machines protected by SEV.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd-sev","hypervisor","confidential-computing","amd-epyc"],"confidence":0.7,"fix_status":"unknown","needs_auth":"yes","worst_case":"guest VM memory integrity is lost for confidential workloads","analyst_note":"Find AMD's security bulletin for CVE-2025-54507 to get affected firmware versions and the fixed release.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-sev-hosts","non-amd-hardware"],"who_is_affected":"Cloud and hypervisor operators running AMD EPYC hosts with SEV enabled for confidential virtual machines. The attacker must already hold administrative privileges on the host, so a team with no SEV-enabled hosts can skip it. The sources do not list affected firmware versions.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000698,"input_tokens":4542,"output_tokens":487,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':14A,17A '-54507':15A,18A 'address':55B,100C 'admin':8A 'administr':43B,88C 'allow':84C 'amd':1A,20B,23B,30B,77C 'amd-epyc':19B 'amd-sev':22B 'attack':86C 'check':6A,36B 'comput':27B 'confidenti':26B 'confidential-comput':25B 'consist':38B,73C 'corrupt':9A 'could':83C 'creat':46B,91C 'cve':13A,16A 'encrypt':80C 'entri':49B,94C 'epyc':21B 'firmwar':3A,32B,82C 'guest':10A,53B,62B,98C,106C 'hypervisor':28B 'improp':70C 'infrastructur':29B 'input':5A,37B,75C 'integr':12A,63B,107C 'let':7A 'loss':60B,104C 'machin':66B 'memori':11A 'multipl':47B,92C 'physic':54B,99C 'potenti':101C 'privileg':44B,89C 'proper':35B 'protect':67B 'result':58B,102C 'rmp':48B,93C 'secur':79C 'sev':2A,24B,31B,69B,78C 'user':41B 'valid':71C 'virtual':65B,81C 'weak':4A 'within':74C","nicknames":[],"mitigations":[],"who_affected":"Cloud and hypervisor operators running AMD EPYC hosts with SEV enabled for confidential virtual machines. The attacker must already hold administrative privileges on the host, so a team with no SEV-enabled hosts can skip it. The sources do not list affected firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amdepyc","amdsev","confidentialcomputing","hypervisor","infrastructure","medium"],"campaign_type":null,"search_a":"'-2025':14A,17A '-54507':15A,18A 'admin':8A 'amd':1A 'check':6A 'corrupt':9A 'cve':13A,16A 'firmwar':3A 'guest':10A 'input':5A 'integr':12A 'let':7A 'memori':11A 'sev':2A 'weak':4A","search_b":"'address':55B 'administr':43B 'amd':20B,23B,30B 'amd-epyc':19B 'amd-sev':22B 'check':36B 'comput':27B 'confidenti':26B 'confidential-comput':25B 'consist':38B 'creat':46B 'entri':49B 'epyc':21B 'firmwar':32B 'guest':53B,62B 'hypervisor':28B 'infrastructur':29B 'input':37B 'integr':63B 'loss':60B 'machin':66B 'multipl':47B 'physic':54B 'privileg':44B 'proper':35B 'protect':67B 'result':58B 'rmp':48B 'sev':24B,31B,69B 'user':41B 'virtual':65B","search_c":"'address':100C 'administr':88C 'allow':84C 'amd':77C 'attack':86C 'consist':73C 'could':83C 'creat':91C 'encrypt':80C 'entri':94C 'firmwar':82C 'guest':98C,106C 'improp':70C 'input':75C 'integr':107C 'loss':104C 'multipl':92C 'physic':99C 'potenti':101C 'privileg':89C 'result':102C 'rmp':93C 'secur':79C 'sev':78C 'valid':71C 'virtual':81C 'within':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T20:18:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-54507","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54507","severity":null,"published_at":"2026-11-12T20:18:14+00:00","modified_at":"2026-11-12T20:18:14+00:00","first_seen_at":"2026-11-12T20:40:22+00:00","fetched_at":"2026-11-12T20:40:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}