CVE-2025-38518
Published: Aug 16, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Disable INVLPGB on Zen2 AMD Cyan Skillfish (Family 17h, Model 47h, Stepping 0h) has an issue that causes system oopses and panics when performing TLB flush using INVLPGB. However, the problem is that that machine has misconfigured CPUID and should not report the INVLPGB bit in the first place. So zap the kernel's representation of the flag so that nothing gets confused. [ bp: Massage. ]
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 767ae437a32d644786c0779d0d54492ff9cbe574 - < 357f121517924e3ec3021f9d0dd0189adcd09867affected 767ae437a32d644786c0779d0d54492ff9cbe574 - < a74bb5f202dabddfea96abc1328fcedae8aa140a |
Linux | Linux | affected 6.15unaffected 0 - < 6.15unaffected 6.15.7 - <= 6.15.*unaffected 6.16 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now