Skip to content
fr Sign in
7.3 High

CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…

Description

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Affected products and versions

Product Affected versions Fixed in
AMD EPYC™ 7002 Series Processors Versions not published
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 3000 Series Desktop Processors Versions not published
AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors Versions not published
AMD Ryzen™ 7030 Series Mobile processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics Versions not published
AMD Ryzen™ 4000 Series Desktop Processors Versions not published
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics Versions not published
Show the 25 other branches
Product Affected versions Fixed in
AMD EPYC™ Embedded 7002 Series Processors Versions not published
AMD Ryzen Embedded V2000A Series Processors Versions not published
AMD Ryzen™ Embedded V2000 Series Processors Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux for NVIDIA 26 Versions not published
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.8 Telecommunications Update Service Versions not published
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Versions not published
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Versions not published
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions Versions not published
Red Hat OpenShift Container Platform 4.19 4.19 earliest → < 4.19.9.6.202608182320-0 4.19.9.6.202608182320-0
Red Hat OpenShift Container Platform 4.20 4.20 earliest → < 4.20.9.6.202608181658-0 4.20.9.6.202608181658-0
Red Hat OpenShift Container Platform 4.21 4.21 earliest → < 4.21.9.6.202608180431-0 4.21.9.6.202608180431-0
Red Hat OpenShift Container Platform 4.22 4.22 earliest → < 4.22.9.8.202608130832-0 4.22.9.8.202608130832-0
Red Hat OpenShift Container Platform 4.12 412.86 earliest → < 412.86.202608241157-0 412.86.202608241157-0
Red Hat OpenShift Container Platform 4.17 417.94 earliest → < 417.94.202608250221-0 417.94.202608250221-0
Red Hat OpenShift Container Platform 4.16 416.94 earliest → < 416.94.202609011112-0 416.94.202609011112-0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of AMD EPYC™ 7002 Series Processors

The 16 CVEs of AMD EPYC™ 7002 Series Processors →
CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to… 8.5 High CVE-2025-48512 Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO)… 7.0 High CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker… 7.1 High CVE-2023-31364 Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest… 8.3 High
Track this CVE