Medium severityNVD Advisory· Published Nov 10, 2026
CVE-2025-54506
CVE-2025-54506
Description
A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.