{"id":"CVE-2025-54508","aliases":[],"cve":{"records":[{"id":"CVE-2025-54508","source":"AMD","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2025-07-23T15:01:50.733Z","published":"2026-11-10T21:44:05.041Z","modified":"2026-11-12T23:39:23.309Z"}],"publishers":[{"name":"AMD","role":"CNA","organizationId":"b58fc414-a1e4-4f92-9d70-1add41838648","modified":"2026-11-10T21:44:05.041Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-12T23:39:23.309Z"}],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html","tags":[],"source":"AMD"}],"weaknesses":[{"id":"CWE-179","description":"CWE-179  Incorrect Behavior Order: Early Validation","source":"AMD"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-12T23:38:51.520840Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger…","titleSource":"AMD","descriptionSource":"AMD","description":"Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity.","score":4,"severity":"medium","published":"2026-11-10T21:44:05.041Z","modified":"2026-11-12T23:39:23.309Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"AMD","name":"AMD EPYC™ 9005 Series Processors","platforms":[],"versions":[{"version":"TurinPI_1.0.0.A","status":"unaffected"}],"defaultStatus":"affected","cpes":[],"source":"AMD","url":"https://www.cve.org/CVERecord?id=CVE-2025-54508"},{"vendor":"AMD","name":"AMD EPYC™ Embedded 9005 Series Processors","platforms":[],"versions":[{"version":"EmbeddedTurinPI_SP5_1004","status":"unaffected"}],"defaultStatus":"affected","cpes":[],"source":"AMD","url":"https://www.cve.org/CVERecord?id=CVE-2025-54508"}],"remediation":[],"references":["https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"],"sources":[{"name":"CVE","id":"CVE-2025-54508","modified":"2026-11-12T23:39:23.309Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-54508"}],"assessments":[{"source":"AMD","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","score":4}],"sourceAffected":[],"observedAt":"2026-11-13T00:15:39.105Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:55:32.844Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-13T00:25:31.659Z","attemptedAt":"2026-11-13T00:25:31.659Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T00:25:31.983Z","attemptedAt":"2026-11-13T00:25:31.983Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T00:25:31.659Z","attemptedAt":"2026-11-13T00:25:31.659Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-13T00:25:31.659Z","attemptedAt":"2026-11-13T00:25:31.659Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2025-54508","url":"https://www.first.org/epss/","probability":0.0016,"percentile":0.0529,"date":"2026-11-12","checkedAt":"2026-11-13T00:25:31.659Z"},{"source":"ENISA EUVD","id":"EUVD-2025-211292","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-211292","modified":"Nov 12, 2026, 11:39:23 PM","score":4,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N","checkedAt":"2026-11-13T00:25:31.659Z"},{"source":"NVD","id":"CVE-2025-54508","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54508","modified":"2026-11-13T00:20:05.243","score":4,"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-13T00:25:31.659Z"},{"source":"GitHub Advisory Database","id":"GHSA-8q92-x38w-p26x","url":"https://github.com/advisories/GHSA-8q92-x38w-p26x","modified":"2026-11-11T00:32:31Z","checkedAt":"2026-11-13T00:25:31.983Z"}],"aiSummary":{"text":"A vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware may allow a privileged attacker to trigger concurrent modifications to Reverse Map Table entries, potentially resulting in loss of data integrity. The affected products are AMD EPYC 9005 Series Processors and AMD EPYC Embedded 9005 Series Processors, excluding versions TurinPI_1.0.0.A and EmbeddedTurinPI_SP5_1004. The weakness is due to improper validation of RMP entries.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T10:56:27.692Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2025-54508"}]}}