Multiple Linux Kernel Vulnerabilities Affect AMD Processors

Recent vulnerabilities in the Linux kernel have been identified, specifically affecting AMD processors. Notably, CVE-2025-54518 reveals that AMD Zen 2 processors fail to isolate shared resources, allowing local attackers to execute higher privilege level instructions, leading to potential privilege escalation. CVE-2025-54505 highlights issues with AMD processors not clearing data in the floating point divider unit during speculative execution, risking sensitive information exposure. Additionally, CVE-2025-62626 concerns AMD Zen 5 processors mishandling entropy for the RDSEED instruction, which could compromise confidentiality and integrity. The vulnerabilities span various subsystems within the Linux kernel, impacting multiple architectures including ARM64, RISC-V, and x86. These vulnerabilities are critical and require immediate attention from system administrators to mitigate risks. The updates have been released as part of security notices USN-8567-1, USN-8566-1, and USN-8568-1.

Key Points: • CVE-2025-54518 allows privilege escalation on AMD Zen 2 processors. • CVE-2025-54505 exposes sensitive data due to improper data clearance in AMD processors. • CVE-2025-62626 risks confidentiality by mishandling entropy in AMD Zen 5 processors.