Riskcovery

CVE-2025-68313

x86/CPU/AMD: Add RDSEED fix for Zen5

State
Published
Severity
7.1 High
Published
Dec 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Add RDSEED fix for Zen5

There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success (CF=1)". Search the web for AMD-SB-7055 for more detail.

Add a fix glue which checks microcode revisions.

[ bp: Add microcode revisions checking, rewrite. ]

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3e4147f33f8b647775357bae0248b9a2aeebfcd2 to before e980de2ff109dacb6d9d3a77f01b27c467115ecbAffected
  • 3e4147f33f8b647775357bae0248b9a2aeebfcd2 to before 36ff93e66d0efc46e39fab536a9feec968daa766Affected
  • 3e4147f33f8b647775357bae0248b9a2aeebfcd2 to before 607b9fb2ce248cc5b633c5949e0153838992c152Affected
  • 5953e7a89966fc5a42124a08ba33a9c57ba5173cAffected
  • 6.6.156 to before 6.7Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.