Race Condition Vulnerability in AMD SEV Secure Encrypted Virtualization Firmware

CVE-2025-54506

What is CVE-2025-54506?

A race condition exists in the AMD SEV Secure Encrypted Virtualization firmware that can be exploited by an attacker with administrative privileges. By leveraging a time-of-check to time-of-use (TOCTOU) flaw, the attacker may bypass critical security checks on scatter lists. This could potentially lead to a compromise of guest integrity, allowing unauthorized access to sensitive data or manipulation of virtualized environments.

References