Riskcovery

CVE-2025-37751

x86/cpu: Avoid running off the end of an AMD erratum table

State
Published
Severity
7.1 High
Published
May 1, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/cpu: Avoid running off the end of an AMD erratum table

The NULL array terminator at the end of erratum_1386_microcode was removed during the switch from x86_cpu_desc to x86_cpu_id. This causes readers to run off the end of the array.

Replace the NULL.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f3f3251526739bb975b97f840c56b3054dba8638 to before 1b518f73f1b6f59e083ec33dea22d9a1a275a970Affected
  • f3f3251526739bb975b97f840c56b3054dba8638 to before f0df00ebc57f803603f2a2e0df197e51f06fbe90Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.