---
id: "CVE-2025-54507"
page: "https://infrastack.ai/live/CVE-2025-54507"
kind: "vulnerability"
aliases: ["CVE-2025-54507"]
title: "AMD SEV firmware: weak input checks let admins corrupt guest memory integrity"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amd-epyc", "amd-sev", "confidential-computing", "hypervisor", "infrastructure"]
not_affected_if: ["no-sev-hosts", "non-amd-hardware"]
published_at: "2026-11-12T20:18:14+00:00"
first_seen_at: "2026-11-12T20:40:22+00:00"
updated_at: "2026-11-12T20:42:22+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54507", "first_seen_at": "2026-11-12T20:40:22+00:00"}]
exploit_sources: []
---

# AMD SEV firmware: weak input checks let admins corrupt guest memory integrity

Link for people: https://infrastack.ai/live/CVE-2025-54507 (this .md is for agents)

AMD SEV firmware does not properly check input consistency, so a user with administrative privileges can create multiple RMP entries for the same guest physical address. This can result in loss of guest integrity for virtual machines protected by SEV.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-12T20:40:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-54507

## From the sources

Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an attacker with administrative privileges to create multiple RMP entries for the same guest physical address, potentially resulting in loss of guest integrity.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_