CVE-2025-52536
Awaiting Analysis Awaiting Analysis - Queue

Firmware Downgrade via Lock Bit Modification Flaw in AMD SEV

Publication date: 2026-02-10

Last updated on: 2026-02-10

Assigner: Advanced Micro Devices Inc.

Description
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-10
Last Modified
2026-02-10
Generated
2026-07-06
AI Q&A
2026-02-10
EPSS Evaluated
2026-07-05
NVD
CVE-2025-52536
EUVD
EUVD-2025-207138

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
amd sev_firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1231 The product uses a trusted lock bit for restricting access to registers, address regions, or other resources, but the product does not prevent the value of the lock bit from being modified after it has been set.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper prevention of lock bit modification in SEV firmware. It means that a privileged attacker could potentially downgrade the firmware by modifying the lock bit, which should normally prevent such changes.

Downgrading the firmware can lead to a loss of integrity, meaning the system's security and trustworthiness could be compromised.

Impact Analysis

If exploited, this vulnerability could allow a privileged attacker to downgrade the SEV firmware, potentially compromising the integrity of the system.

A loss of integrity in firmware can lead to unauthorized changes, reduced security protections, and increased risk of further attacks or system compromise.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52536. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart