CVE-2025-54517 is an out-of-bounds write vulnerability in the AMDGV_CMD_GET_DIAG_DATA ioctl handler of the AMD Instinct™ MI250 device. This vulnerability could allow a local user with limited privileges to escalate their privileges, potentially enabling remote code execution. The CVSS 4.0 vector indicates the attack requires local access with low complexity and no user interaction, and the vulnerability impacts confidentiality, integrity, and availability at a high level. The vulnerability is categorized as CWE-787. No patch or official remediation level has been disclosed by AMD as of the publication date.

The vulnerability enables a local attacker with limited privileges to perform an out-of-bounds write, which can lead to privilege escalation and potentially remote code execution. This could compromise system confidentiality, integrity, and availability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level has been published by AMD, users should monitor AMD's advisories for updates. Until a patch is available, restrict local access to trusted users only to reduce risk.