Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-54504 EUVD-2025-211291GHSA-9q89-f8fc-rgw7

Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrativ…

Published Nov 10, 2026 · Updated Nov 12, 2026 · Assigned by AMD

Description

Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.

Affected products

VendorProductAffectedFixed
AMD AMD EPYC™ 9005 Series Processors — TurinPI_1.0.0.A
AMD AMD EPYC™ Embedded 9005 Series Processors — EmbeddedTurinPI_SP5_1004

Advisories 1

References