CVE-2025-54502

A flaw was found in the AMD Platform Configuration Blob (APCB) SMM driver. A privileged attacker with local access (Ring 0) can exploit an incorrect use of a boot service. This vulnerability may allow the attacker to achieve privilege escalation, potentially leading to arbitrary code execution.

This is an Important flaw in the AMD Platform Configuration Blob (APCB) SMM driver affecting Red Hat Enterprise Linux on AMD systems. A privileged local attacker (Ring 0) could exploit an incorrect boot service use to achieve privilege escalation, potentially leading to arbitrary code execution. Exploitation requires an attacker to already have high privileges on the system. The fix for this vulnerability is provided by AMD.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.