Riskcovery

CVE-2025-38518

x86/CPU/AMD: Disable INVLPGB on Zen2

State
Published
Severity
Not scored
Published
Aug 16, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Disable INVLPGB on Zen2

AMD Cyan Skillfish (Family 17h, Model 47h, Stepping 0h) has an issue that causes system oopses and panics when performing TLB flush using INVLPGB.

However, the problem is that that machine has misconfigured CPUID and should not report the INVLPGB bit in the first place. So zap the kernel's representation of the flag so that nothing gets confused.

[ bp: Massage. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 767ae437a32d644786c0779d0d54492ff9cbe574 to before 357f121517924e3ec3021f9d0dd0189adcd09867Affected
  • 767ae437a32d644786c0779d0d54492ff9cbe574 to before a74bb5f202dabddfea96abc1328fcedae8aa140aAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.15.7 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.