Overview
CVE-2025-54515 describes a security vulnerability found within the Arm Trusted Firmware for Cortex-A processors (TF-A) used in Versal™ Adaptive SoCs. The issue stems from an incorrect configuration of the Secure Flag passed to the TF-A for Arm’s Power State Coordination Interface (PSCI) commands. This flaw could potentially allow PSCI requests originating from the non-secure state to be misinterpreted as originating from the secure state.
Technical Details
The vulnerability lies in the way the Secure Flag is handled when invoking PSCI commands. Instead of accurately reflecting the security state of the processor initiating the request (secure or non-secure), the flag was incorrectly being set to “secure” regardless of the actual context. This misrepresentation could lead to unintended behavior within the system, as the TF-A might grant privileges or execute actions based on a false sense of security origin.
CVSS Analysis
The National Vulnerability Database (NVD) currently lists the severity and CVSS score for CVE-2025-54515 as N/A. This may indicate that the vulnerability is still under analysis or that the impact is considered to be context-dependent. A thorough risk assessment should be performed considering the specific implementation and deployment environment of the affected Versal Adaptive SoC.
Possible Impact
While the exact impact depends on the system’s design and how PSCI commands are utilized, the potential consequences of this vulnerability include:
- Privilege Escalation: Non-secure code might be able to trigger secure operations or access protected resources due to the misrepresented security state.
- System Instability: Incorrectly executed power state transitions or resource management could lead to system crashes or unpredictable behavior.
- Information Disclosure: Sensitive information intended for the secure environment might be exposed to the non-secure environment.
Mitigation or Patch Steps
The primary mitigation strategy involves updating the Arm Trusted Firmware (TF-A) to a version that corrects the Secure Flag handling for PSCI commands. Refer to the AMD Security Bulletin for specific instructions and patched firmware images.
Contact AMD support for guidance on identifying affected systems and implementing the necessary updates.
References
AMD Security Bulletin AMD-SB-8020
Published: 2025-11-23T18:15:55.163
