CVE-2025-54504
Description
Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.
Is your site exposed to CVE-2025-54504?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2025-54504? +
How do I check if I'm vulnerable to CVE-2025-54504? +
Related Vulnerabilities
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application …
Insufficient granularity of access control in the MigTD v2 policy evaluation engine for the Intel(R) TDX Migration Trust Domain (MigTD) …
The web profile and RSS/Atom feed routes of users and organizations checked only whether a signed-in viewer could see a …
Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced …
P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on …
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, …
