CVE-2025-52536
MediumSummary
A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.
Risk Assessment
The organization faces a risk of SEV firmware integrity loss, enabling an attacker to roll back to a vulnerable firmware version and potentially compromise encrypted virtual machines.
Recommendation
Apply the SEV firmware update provided by the vendor (AMD) immediately and restrict administrative access to systems using this technology.
Other vulnerabilities in AMD SEV firmware
See all- CVE-2025-29952Medium
An improper initialization vulnerability in the AMD Secure Encrypted Virtualization (SEV) firmware allows an admin-privileged attacker to corrupt RMP-covered memory, potentially leading to loss of guest memory integrity.
- CVE-2025-29948Medium
An improper access control vulnerability in AMD Secure Encrypted Virtualization (SEV) firmware allows a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity.
- CVE-2025-29946Medium
A vulnerability in SEV (Secure Encrypted Virtualization) firmware causes insufficient or incomplete data removal in a hardware component, resulting in incomplete IOMMU flushing. This can potentially lead to a loss of confidentiality and integrity in guest memory.
- CVE-2025-0031Medium
A use-after-free vulnerability in SEV firmware allows a malicious hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent, potentially leading to loss of integrity.
- CVE-2025-48517Medium
Insufficient granularity of access control in SEV firmware allows a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID meant for SEV-SNP guests, potentially leading to partial loss of confidentiality.
Original NVD description (English source)
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS