Home

Description

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish (Family 17h, Model 47h, Stepping 0h) has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has misconfigured CPUID and should not report the INVLPGB bit in the first place. So zap the kernel's representation of the flag so that nothing gets confused. [ bp: Massage. ]

PUBLISHED Reserved 2025-04-16 | Published 2025-08-16 | Updated 2025-08-16 | Assigner Linux

Product status

Default status
unaffected

767ae437a32d644786c0779d0d54492ff9cbe574 before 357f121517924e3ec3021f9d0dd0189adcd09867
affected

767ae437a32d644786c0779d0d54492ff9cbe574 before a74bb5f202dabddfea96abc1328fcedae8aa140a
affected

Default status
affected

6.15
affected

Any version before 6.15
unaffected

6.15.7
unaffected

6.16
unaffected

References

git.kernel.org/...c/357f121517924e3ec3021f9d0dd0189adcd09867

git.kernel.org/...c/a74bb5f202dabddfea96abc1328fcedae8aa140a

cve.org (CVE-2025-38518)

nvd.nist.gov (CVE-2025-38518)

Download JSON