CVE-2025-52536

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

A vulnerability in SEV (Secure Encrypted Virtualization) firmware allows a privileged attacker to modify the lock bit, potentially downgrading the firmware and compromising system integrity.

Risk Assessment

The organization faces a risk of SEV firmware integrity loss, enabling an attacker to roll back to a vulnerable firmware version and potentially compromise encrypted virtual machines.

Recommendation

Apply the SEV firmware update provided by the vendor (AMD) immediately and restrict administrative access to systems using this technology.

Original NVD description (English source)

Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.