x86-64.net

Processor vulnerability

CVE-2025-54518

The op cache of Zen 2 processors does not isolate what it shares well enough, so an attacker can corrupt instructions run at another privilege level.

Name
CPU Op Cache Corruption
Kind
Other
CVE published
2026-05-15 CVE record
Advisories
AMD-SB-7052
AMD found internally that the operation cache of Zen 2 cores, which keeps decoded instructions, does not isolate what it shares between privilege levels well enough: an attacker can corrupt the instructions executed at another level, a possible privilege escalation. For EPYC 7002 the fix is in operating systems; for Ryzen, Threadripper and embedded products it is in AGESA firmware released from October 2025.

Affected processors

1 of the 1 microarchitectures listed are affected in all or some of their models.

What the sources say of each microarchitecture.
MicroarchitectureStatusDetailSource
Zen 2AffectedEPYC 7002 and Embedded 7002; Ryzen 3000 desktop, 4000, 5000 with Radeon graphics, 7020; Threadripper PRO 3000WX; Ryzen Embedded V2000amd.com

Mitigations

  • Kernel: An operating system update for EPYC 7002 and Embedded 7002. Source.
  • Firmware: AGESA PI firmware for the Ryzen, Threadripper and Ryzen Embedded products. Source.

Sources

  1. AMD-SB-7052: CPU OP Cache Corruption