Skip to content
Critical Vulnerabilities in Linux Kernel Affect AMD Processors

Critical Vulnerabilities in Linux Kernel Affect AMD Processors

First seen 20 Jul 2026, 17:39 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 21, 2026 at 16:29 UTC
  • •Critical vulnerabilities in the Linux kernel affect AMD processors, including Zen 2 and Zen 5.
  • •Local attackers can exploit these vulnerabilities to access sensitive information and escalate privileges.
  • •Patches are available, and users are urged to update their systems immediately.

Multiple vulnerabilities have been identified in the Linux kernel affecting AMD processors, specifically in the floating point divider unit and Zen 2 and Zen 5 architectures. Local attackers could exploit these vulnerabilities to expose sensitive information or escalate privileges. The vulnerabilities are tracked as CVE-2025-54505, CVE-2025-54518, and CVE-2025-54526. Affected systems include Ubuntu 24.04 LTS and Google Cloud Platform (GCP) systems. Security updates have been released to address these issues, and users are urged to apply them promptly. The vulnerabilities were disclosed on July 21, 2026, with patches available to mitigate the risks. The situation remains critical as attackers may leverage these flaws for exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 93d ago How this analysis works

Timeline

2024-08-28
CVE-2023-45896 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-02-27
CVE-2025-21709 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-04-16
CVE-2025-22116 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-07-25
CVE-2025-38426 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-09-11
CVE-2025-39764 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-11-12
CVE-2025-40150 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-11-12
CVE-2025-40135 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-11-21
CVE-2025-62626 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-12-16
CVE-2025-68239 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-12-16
CVE-2025-68175 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (60)

Following this threat?

Track Google Cloud Platform and CVE-2022-49803 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed