Kernel Vulnerability in AMD CPUs Leading to System Failures

CVE-2025-38518

What is CVE-2025-38518?

A vulnerability exists in the Linux kernel impacting AMD CPUs, particularly the Zen2 architecture. The issue stems from a misconfigured CPUID in certain AMD processors, leading to erroneous reporting of the INVLPGB bit. This misconfiguration can cause system oopses and panics when TLB (Translation Lookaside Buffer) flush operations are performed using INVLPGB, potentially destabilizing the system. The kernel has been updated to disable INVLPGB for affected processors to avoid confusion and enhance system stability.

References