PT-2025-28491

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution vulnerability in some AMD processors may allow a user process to infer TSC AUX even when such a read is disabled, potentially resulting in information leakage...

AMD Store Queue security vulnerability

The AMD Store Queue is an important component of a processor architecture from UltraMicro Semiconductor AMD that is primarily used to manage instruction queues for storage Store operations. A security vulnerability exists in AMD Store Queue. No information about this vulnerability is available at...

CVE-2024-36350: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

CVE-2024-36348: Exposure of Sensitive Information during Transient Execution

A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage...

CVE-2024-36357: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2024-36349: Exposure of Sensitive Information during Transient Execution

A transient execution vulnerability in some AMD processors may allow a user process to infer TSCAUX even when such a read is disabled, potentially resulting in information leakage...

CVE-2024-36350

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

PT-2025-28490

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if the UMIP feature is enabled, potentially...

PT-2025-31825

Name of the Vulnerable Software and Affected Versions AMD Store Queue affected versions not specified Description A vulnerability exists in the AMD Store Queue that can lead to information disclosure. Exploitation of this issue may allow an attacker to gain access to sensitive information and...

HPESBHF04889 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7029: AMD Transient Scheduler Attacks, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Privileged Information, Disclosure of Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL145 Gen11 - Prior to 1.4001-17-2025 HPE ProLiant DL325 Gen11 Server - Prior to 2.3001-17-2025 HPE ProLiant DL3...

AMD Processors security vulnerabilities

AMD Processors is a processor from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Processors that originates from a user process that may speculatively infer control registers, potentially leading to information disclosure...

AMD Transient Scheduler Attacks

AMD ID: AMD-SB-7029 Potential Impact: Loss of Confidentiality Severity: Medium Summary AMD discovered several transient scheduler attacks related to the execution timing of instructions under specific microarchitectural conditions while investigating a Microsoft® report titled “Enter, Exit, Page...

PT-2025-31824

Name of the Vulnerable Software and Affected Versions AMD Store Queue affected versions not specified Description A vulnerability exists in the AMD Store Queue that can lead to information disclosure. Exploitation of this issue may allow an attacker to gain access to sensitive information and...

SUSE CVE-2025-38205

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 Why If the dummy values in populatedummydmlsurfacecfg aren't updated then they can lead to a divide by zero in downstream callers like CalculateVMAndRowBytes...

Unbreakable Enterprise kernel security update

5.15.0-309.180.4.2 - Add Zen34 clients Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - x86/process: Move the buffer clearing before MONITOR Kim Phillips Orabug: 38129825 CVE-2024-36350 CVE-2024-36357 - Add normal counters Borislav Petkov AMD Orabug: 38129825 CVE-2024-36350...

USN-7605-2: Linux kernel (Low Latency) vulnerabilities

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. CVE-2025-2312 Several security issues were discovered in the Linux kernel. An...

CVE-2025-38205

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 Why If the dummy values in populatedummydmlsurfacecfg aren't updated then they can lead to a divide by zero in downstream callers like CalculateVMAndRowBytes...

CVE-2025-38205

The CVE CVE-2025-38205 affects the Linux kernel’s DRM AMD display path. The root cause is a divide-by-zero risk in downstream code caused by uninitialized dummy pitch values in populate_dummy_dml_surface_cfg(); the fix initializes the dummy pitch to 1 to prevent division by zero in CalculateVMAnd...

CVE-2025-38205 drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 Why If the dummy values in populatedummydmlsurfacecfg aren't updated then they can lead to a divide by zero in downstream callers like CalculateVMAndRowBytes...