Vulnerability in Linux Kernel Affecting AMD Zen5 Processors

CVE-2025-68313

What is CVE-2025-68313?

A vulnerability has been identified in the Linux kernel, particularly affecting AMD Zen5 processors. This issue pertains to the RDSEED instruction, which is designed to provide random values. Unfortunately, in specific scenarios, the instruction returns a constant value of 0 too frequently, misleadingly indicating a successful operation. This inconsistency raises significant concerns regarding the reliability of randomness output from the processor, potentially undermining cryptographic operations and overall system security. A recent update has introduced checks for microcode revisions to address this problem effectively. For further technical details, refer to AMD-SB-7055 and related documentation.

References