PT-2025-33561 · Linux+2 · Linux Kernel+2

Published 2025-07-08 · Updated 2025-08-16 · CVE-2025-38518

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue related to the handling of TLB flushes using INVLPGB on AMD Cyan Skillfish processors (Family 17h, Model 47h, Stepping 0h). This can lead to system crashes and panics due to a misconfigured CPUID that incorrectly reports the INVLPGB bit. The kernel's representation of the flag is modified to prevent confusion.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1256

Related Identifiers

BDU:2026-03242

CVE-2025-38518

Affected Products

Amd Cyan Skillfish

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38518.json · Exploit
• https://git.kernel.org/stable/c/a74bb5f202dabddfea96abc1328fcedae8aa140a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38518 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38518 · Vendor Advisory
• https://git.kernel.org/stable/c/357f121517924e3ec3021f9d0dd0189adcd09867 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38518 · Security Note
• https://bdu.fstec.ru/vul/2026-03242 · Security Note
• https://osv.dev/vulnerability/CVE-2025-38518 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38518 · Security Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.15.7 · Note
• https://git.kernel.org/linus/a74bb5f202dabddfea96abc1328fcedae8aa140a · Note
• https://t.me/CVEtracker/30207 · Telegram Post
• https://twitter.com/CVEnew/status/1956675599944360430 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2025081653-CVE-2025-38518-2b55@gregkh · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note