🔐 CVE Alert

CVE-2025-54506

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.

CWE CWE-367
Vendor amd
Product amd epyc™ 9005 series processors
Published Nov 10, 2026
Stay Ahead of the Next One

Get instant alerts for amd amd epyc™ 9005 series processors

Be the first to know when new unknown vulnerabilities affecting amd amd epyc™ 9005 series processors are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

AMD / AMD EPYC™ 9005 Series Processors
All versions affected
AMD / AMD EPYC™ Embedded 9005 Series Processors
All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗
amd.com: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html