CVE-2025-68313

HIGH7.1

x86/CPU/AMD: Add RDSEED fix for Zen5

Published Dec 16, 2025

Modified 2 weeks ago

Details

In the Linux kernel, the following vulnerability has been resolved:

x86/CPU/AMD: Add RDSEED fix for Zen5

There's an issue with RDSEED's 16-bit and 32-bit register output variants on Zen5 which return a random value of 0 "at a rate inconsistent with randomness while incorrectly signaling success (CF=1)". Search the web for AMD-SB-7055 for more detail.

Add a fix glue which checks microcode revisions.

[ bp: Add microcode revisions checking, rewrite. ]

References

WEB

https://git.kernel.org/stable/c/36ff93e66d0efc46e39fab536a9feec968daa766

WEB

https://git.kernel.org/stable/c/607b9fb2ce248cc5b633c5949e0153838992c152

WEB

https://git.kernel.org/stable/c/e980de2ff109dacb6d9d3a77f01b27c467115ecb

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-68313

CVSS Analysis

CVSS v3.1

7.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

NoneA:N

7.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Ecosystems

Timeline

PublishedDec 16, 2025

ModifiedSep 2, 2026

CVE-2025-68313 | Mondoo Vulnerability Intelligence