CVE-2025-54502

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
Configurations

No configuration.

History

30 Jun 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/security/cve/CVE-2025-54502 -
  • () https://bugzilla.redhat.com/show_bug.cgi?id=2459023 -
  • () https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-54502.json -
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-648

16 Apr 2026, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-16 20:16

Updated : 2026-07-15 02:17


NVD link : CVE-2025-54502

Mitre link : CVE-2025-54502

CVE.ORG link : CVE-2025-54502


JSON object : View

Products Affected

No product.

CWE
CWE-668

Exposure of Resource to Wrong Sphere

CWE-648

Incorrect Use of Privileged APIs